Cybersecurity Compliance and System Security Plan (SSP) Development

The contract requires the performance of comprehensive cybersecurity assessments to ensure the protection of Controlled Unclassified Information in accordance with NIST SP 800-171 Rev 1 standards. This includes the development of a detailed System Security Plan that documents implementation of required security controls, risk management processes, and organizational policies aligned with federal cybersecurity requirements. The successful contractor must also ensure all security practices are properly documented, tested, and validated to support compliance verification, with final submission of the SSP to the Department of Defense Supplier Performance Risk System for official recordkeeping and assessment. The work is to be performed at Fort Bliss, Texas, 79916-2527, under a subcontract arrangement with the Medical Supply Chain MD Surg FSF, operating under the Department of Defense. The North American Industry Classification System code is 541611, indicating the engagement falls within the scope of administrative management and general management consulting services, specifically tied to cybersecurity advisory and compliance. The opportunity was posted on April 30, 2026, with a firm deadline for responses on May 6, 2026, and all deliverables must meet stringent DoD compliance benchmarks to safeguard sensitive information within the defense supply chain.