NIST SP 800-171 Compliance Assessment & System Security Plan (SSP) Development

The contract mandates a comprehensive cybersecurity compliance assessment aligned with NIST Special Publication 800-171 requirements, focusing on identifying deficiencies in current security controls and implementing corrective measures to meet federal standards. The successful contractor will be responsible for developing or revising a System Security Plan that accurately documents the organization’s security posture, controls, and mitigation strategies, ensuring full alignment with NIST SP 800-171 and readiness for submission to the Supplier Performance Risk System. This effort is critical for maintaining eligibility to handle controlled unclassified information within the Department of Defense supply chain. The work is scoped as a subcontract under the Medical Supply Chain MD Surg FSF, with performance required at Holloman Air Force Base, ZIP 88330-8273. The solicitation, issued under NAICS code 541611 for Administrative Management and General Management Consulting Services, has a response deadline of May 5, 2026, and is targeted at organizations with expertise in federal cybersecurity compliance and documentation. Completion of this task directly impacts the client’s ability to meet DoD contract obligations and maintain secure information handling practices, making timely and accurate delivery of the SSP and compliance assessment essential.