Information System Security Plan (ISSP) Development and Maintenance

The contract calls for the development, implementation, and ongoing maintenance of an Information System Security Plan (ISSP) that must adhere to federal cybersecurity standards including FISMA, the NIST 800-series guidelines, OMB A-130, and specific Department of Veterans Affairs directives such as VA Handbook 6500.6. The work is required to ensure the protection of information systems handling sensitive VA data, with compliance being a non-negotiable requirement throughout the lifecycle of the plan. The contractor must demonstrate expertise in federal information security frameworks and the ability to tailor security controls to meet VA-specific operational and regulatory needs. This is a subcontract under a Total Small Business Set-Aside designation, meaning only small businesses certified by the SBA are eligible to respond. The NAICS code 541611 categorizes the work under Management, Scientific, and Technical Consulting Services, signaling the need for specialized technical and advisory capabilities. The proposal must be submitted by May 29, 2026, and performance is expected to occur at the El Paso location with a ZIP code of 79930. While the contracting office is listed as the 257-NETWORK Contract Office 17 under the Department of Veterans Affairs, no point of contact information is provided in the data, and the opportunity is accessible through the SAM.gov portal for interested small businesses.