Cybersecurity Compliance & System Security Plan (SSP) Development

The contract involves the development, implementation, and ongoing maintenance of a System Security Plan (SSP) in compliance with NIST SP 800-171 Rev 1 standards. It encompasses the creation of control documentation, conducting self-assessments, and reporting to the Supplier Performance Risk System (SPRS) to ensure the protection of Controlled Unclassified Information (CUI). The work is to be performed as a subcontract and falls under the NAICS code 541512, which relates to computer systems design services. This effort is commissioned by the Department of Defense, specifically the Medical Supply Chain FSH, with the place of performance located at Camp Pendleton, California (zip code 92055-5627). The solicitation was posted on May 13, 2026, with a response deadline of May 20, 2026. The primary goal of this contract is to support cybersecurity compliance by establishing and maintaining a robust SSP framework to safeguard sensitive information within the organization’s supply chain operations.