Cybersecurity Compliance and System Security Planning (SSP) Development

This subcontract requires the implementation and documentation of NIST SP 800-171 cybersecurity controls for systems that handle Controlled Unclassified Information (CUI). The contractor will be responsible for developing detailed System Security Plans (SSPs) that outline the security measures in place, as well as assessing the systems for compliance. Additionally, the results of these assessments must be submitted to the Supplier Performance Risk System (SPRS) to ensure transparency and accountability in meeting cybersecurity requirements. The contract, issued by the Department of Defense through the Medical Supply Chain MD SURG FSF office, is designated under NAICS code 541611, which pertains to administrative management and general management consulting services. The work is to be performed in Perry Point, with a solicitation posted on May 11, 2026, and a response deadline of May 18, 2026. This subcontract focuses specifically on cybersecurity compliance related to DoD procurement and supply chain systems, emphasizing the protection of sensitive but unclassified information throughout the process.