NIST SP 800-171 System Security Plan (SSP) Development

The contract requires the development of a comprehensive System Security Plan (SSP) for systems that handle Controlled Unclassified Information (CUI), ensuring full alignment with the requirements of NIST Special Publication 800-171 Revision 1. The SSP must thoroughly document the system architecture, identify and implement all applicable security controls, and detail the safeguards in place to protect CUI from unauthorized access, disclosure, or compromise. The plan must reflect a structured approach to risk management and compliance, covering administrative, technical, and physical security measures as mandated by the standard. This is a subcontract opportunity under the Department of Defense, specifically managed by the Medical Supply Chain FSH organization, with performance required in San Antonio, Texas, 78226. All proposals must be submitted by May 18, 2026, and the work is categorized under NAICS code 541611, which pertains to management consulting services. The solicitation is accessible via the DIBBS portal, and while no point of contact is listed, responders are expected to adhere strictly to NIST 800-171 Rev 1 controls, ensuring the SSP is complete, accurate, and auditable for federal compliance purposes.