NIST SP 800-171 System Security Assessment and Compliance

The contract involves performing assessments based on the NIST SP 800-171 standard to evaluate cybersecurity compliance for organizations handling controlled unclassified information. It requires the development of System Security Plans (SSPs) detailing the security controls implemented and the submission of assessment results into the Supplier Performance Risk System (SPRS) aligned with medium or high baseline compliance levels. The work will support the Department of Defense's ASC Commodities Division and is designated as a subcontract opportunity under NAICS code 541512, related to computer systems design services. The performance location is specified as New Cumberland, with a postal code of 17070-5002. The contract was posted on May 10, 2026, with a response deadline set for May 18, 2026, indicating a relatively short timeframe for submission. Although there is no indication of set-aside criteria or specific organizational type requirements, this contract contributes to ensuring that defense supply chain entities meet critical cybersecurity standards mandated by the Department of Defense.