NIST SP 800-171 System Security Plan (SSP) Development and Assessment

The contract requires the development, documentation, and assessment of a System Security Plan aligned with NIST SP 800-171 Rev 1 standards, including a self-assessment and submission to the Supplier Performance Risk System. The work involves ensuring all required security controls are accurately implemented, documented, and evaluated to meet federal cybersecurity requirements for protecting controlled unclassified information. The deliverables must reflect full compliance with the framework, covering policies, procedures, and technical safeguards across the organization’s information systems. This subcontract is tied to the Department of Defense through the Medical Supply Chain MD Surg FSF and has a place of performance in Fort Campbell with a ZIP code of 42223-5000. The solicitation was posted on April 29, 2026, with a response deadline of May 5, 2026, and falls under NAICS code 541611 for management consulting services. While no set-aside classification is specified, the nature of the work suggests it supports DoD cybersecurity obligations and requires expertise in NIST compliance, risk assessment, and federal information security documentation. All submissions must be completed within the narrow window leading up to the deadline to be considered for award.