NIST SP 800-171 Compliance Assessment and System Security Plan (SSP) Development

The contract involves conducting a thorough assessment of a contractor’s information systems to ensure compliance with the NIST SP 800-171 security requirements. This includes a detailed evaluation of security controls and their implementation status, as well as the identification of system boundaries. The outcome of this assessment is the development of a comprehensive System Security Plan (SSP), which documents the security posture and measures taken for Department of Defense (DoD) cybersecurity compliance. The contract is a subcontract opportunity issued by the Department of Defense under the Medical Supply Chain MD SURG FSF agency, specifically for work performed at Camp Pendleton, zip code 92055-5627. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026. It falls under NAICS code 541611, which covers administrative management and general management consulting services. This effort supports the DoD's efforts to safeguard sensitive defense information by ensuring contractors maintain robust cybersecurity practices in line with federal standards.