NIST SP 800-171 Compliance Implementation & System Security Plan Development

The contract focuses on developing and implementing a System Security Plan (SSP) that complies with NIST SP 800-171 standards to safeguard Controlled Unclassified Information (CUI). Key tasks include performing a thorough gap analysis to identify security deficiencies, deploying necessary safeguards to address those gaps, and preparing documentation for the Supplier Performance Risk System (SPRS). The work will ensure that the system’s security posture aligns with federal requirements for protecting sensitive information. Issued by the Department of Defense's Medical Supply Chain MD SURG FSF, this subcontract opportunity is categorized under NAICS code 541512 and is set to be performed in San Antonio, Texas, ZIP code 78226. The solicitation was posted on May 13, 2026, with a response deadline of May 19, 2026, reflecting a tight turnaround for interested contractors to submit their proposals. The contract aims to enhance compliance measures within defense supply chain systems by strictly adhering to established cybersecurity frameworks.