Cybersecurity Compliance & System Security Plan (SSP) Development

This contract focuses on conducting a thorough assessment in accordance with NIST SP 800-171 Revision 1, aimed at enhancing cybersecurity measures. The scope includes developing a detailed System Security Plan (SSP) that outlines the security controls and processes to protect controlled unclassified information. Additionally, the contract ensures compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, which mandates rigorous cyber incident reporting requirements for defense contractors. The work is to be performed under a subcontract with the Department of Defense’s Medical Supply Chain MD SURG FSF office, located at the Fleet Post Office (FPO) with the zip code 96694. This opportunity falls under NAICS code 541612, which pertains to administrative management and general management consulting services. The contract was posted on May 12, 2026, with responses due by May 18, 2026, highlighting a concise timeline for proposal submissions. The overall objective is to ensure that cybersecurity practices meet federal standards to safeguard sensitive defense supply chain information effectively.