NIST SP 800-171 Cybersecurity Compliance & System Security Plan (SSP) Development

The contract seeks cybersecurity compliance services focused on aligning systems with NIST SP 800-171 Rev 1 requirements to protect controlled unclassified information, with an emphasis on developing or updating System Security Plans to reflect current security controls and risk management practices. The work must also ensure compliance with DoD Instruction 5000.79 and the Supplier Performance Risk System standards, requiring a thorough understanding of federal cybersecurity frameworks and the ability to document and implement appropriate safeguards across all relevant systems and processes. The deliverables include comprehensive SSPs that accurately capture security controls, governance structures, and continuous monitoring procedures to support CUI handling. The contract is a subcontract under the Department of Defense, with performance expected at Camp Pendleton, California, 92055-5627. It is classified under NAICS code 541611 for management consulting services and was posted on May 10, 2026, with responses due by May 18, 2026. There is no set-aside designation specified, and the contract is being managed by the Medical Supply Chain FSH organization. Interested parties must submit proposals through the DIBBS portal using the provided solicitation link prior to the deadline to be considered for award.