NIST SP 800-171 DoD Assessment and System Security Plan Development

The contract requires the execution of a comprehensive NIST SP 800-171 assessment for the Department of Defense, focused on evaluating the security posture of a system against federal requirements for protecting controlled unclassified information. This includes developing a detailed System Security Plan that documents all implemented and planned security controls, along with a thorough description of the system architecture to ensure alignment with NIST standards. All findings from the assessment must be formally submitted to the DoD, ensuring transparency and compliance. The contractor is also obligated to respond to any DoD feedback or challenges by providing a rebuttal or supplementary documentation within 14 business days if requested, demonstrating the ability to rapidly address concerns and adapt assessments as needed. The work is to be performed at the New Cumberland facility with a ZIP code of 17070-5002, under a subcontract classification, and falls under the NAICS code 541611 for management consulting services. The solicitation was posted on July 30, 2026, with a response deadline of August 4, 2026.