NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

This contract involves performing a comprehensive assessment of information systems to ensure compliance with the NIST SP 800-171 Revision 1 requirements. The contractor is responsible for thoroughly evaluating the systems, documenting all findings related to security controls and deficiencies, and subsequently developing or updating the System Security Plan (SSP) to reflect the current security posture. The final documentation and assessment results must be submitted to the Department of Defense's Supplier Performance Risk System (SPRS). The contract is a subcontract opportunity under the NAICS code 541611, posted by the Department of Defense's Medical Supply Chain MD SURG FSF office. The work will be performed in Jacksonville, with a response deadline set for May 18, 2026. This effort is geared toward enhancing the cybersecurity readiness of DoD information systems by ensuring they meet mandated minimum security standards essential for protecting controlled unclassified information.