Cybersecurity Compliance – System Security Plan (SSP) Development & Assessment

This contract involves the development, assessment, and ongoing maintenance of a System Security Plan (SSP) for contractor systems that handle Controlled Unclassified Information (CUI). The work must ensure compliance with stringent cybersecurity standards as outlined in NIST SP 800-171 and Department of Defense Federal Acquisition Regulation Supplement (DFARS) requirements. The objective is to enhance the security posture of information systems by documenting and validating all security controls and measures related to the handling of sensitive but unclassified government information. Awarded as a subcontract under the NAICS code 541611, this contract is associated with the Medical Supply Chain MD SURG FSF office of the Department of Defense. The place of performance is located at Travis Air Force Base, California, with responses due by May 18, 2026. The contract emphasizes adherence to federal cybersecurity regulations to safeguard defense-related data, reflecting the government's commitment to protecting controlled unclassified data within contractor-managed environments.