Cybersecurity Compliance Implementation – NIST SP 800-171 Assessment & SSP Development

The contract requires full implementation of NIST SP 800-171 security controls to protect Covered Defense Information, including the development of a comprehensive System Security Plan that aligns with federal cybersecurity standards. The contractor must conduct a formal Department of Defense assessment to validate compliance and submit the completed SSP to the Supplier Performance Risk System for official recording and evaluation. This effort is critical to maintaining the security posture of sensitive information within the defense supply chain and ensuring adherence to mandated federal requirements. The work is scoped as a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain MD Surg FSF, with performance expected to center at the APO location identified by zip code 09094-3219. All activities must be completed and submitted before the response deadline of May 18, 2026, under the NAICS code 541611 for management, scientific, and technical consulting services.