Cybersecurity Assessment and System Security Plan (SSP) Development

The contract requires the performance of cybersecurity assessments on Department of Defense systems that handle covered defense information, with the primary objective of ensuring compliance with NIST SP 800-171 Rev 1. A comprehensive System Security Plan must be developed to document security controls, configurations, and procedures aligned with these standards. The contractor is responsible for accurately documenting the system architecture, including relevant CAGE codes, to support traceability and accountability across the defense supply chain. All findings and outcomes from the assessment must be reported through the Supplier Performance Risk System to maintain visibility and compliance for DoD oversight. The contract is structured as a subcontract under the agency name Medical Supply Chain MD Surg FSF, with performance expected at an FPO location identified by the zip code 96616. The solicitation falls under NAICS code 541611, indicating it is related to administrative management and general management consulting services, specifically cybersecurity consulting. Respondents must submit proposals by May 19, 2026, with the solicitation posted on May 13, 2026, and all work must be completed in alignment with DoD cybersecurity requirements and reporting protocols. Failure to meet any compliance or documentation standards may result in rejection or contract non-performance.