Cybersecurity Compliance & SSP Development

The contract requires the development and ongoing maintenance of a System Security Plan (SSP) to ensure compliance with NIST SP 800-171 standards for the protection of Controlled Unclassified Information (CUI). The work involves performing assessments and supporting documentation submissions through the Department of Defense Supplier Performance Risk System (SPRS) to validate and demonstrate adherence to federal cybersecurity requirements. The contractor must establish, implement, and sustain security controls aligned with NIST guidelines, monitor for changes in regulatory requirements, and provide timely updates to the SSP to reflect evolving threats and organizational changes. This is a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain MD Surg FSF, with performance centered at FPO, zip code 09583. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, and falls under NAICS code 541611 for Management, Scientific, and Technical Consulting Services. The contractor must possess the technical expertise to interpret and apply NIST 800-171 controls, conduct internal audits, and generate accurate SPRS reporting artifacts to satisfy DoD compliance obligations. Failure to maintain current compliance or submit accurate assessments may result in contractual nonperformance and potential loss of access to sensitive government data systems.