NIST SP 800-171 System Security Plan (SSP) Development and Compliance Support

This contract involves the development, submission, and ongoing maintenance of System Security Plans (SSPs) that adhere to the NIST SP 800-171 Revision 1 standards, specifically designed to protect Controlled Unclassified Information (CUI). The scope of work also includes conducting comprehensive cybersecurity assessments and reporting scores in the Supplier Performance Risk System (SPRS), ensuring the contractor’s cybersecurity posture is effectively measured and maintained. The contract supports compliance and security efforts related to sensitive information handling within the Department of Defense's Medical Supply Chain Pharm FSA. The contract is a subcontract effort under NAICS code 541512, with work performed primarily at an FPO location with zip code 09583. The solicitation was posted on May 10, 2026, with a response deadline of May 18, 2026. This opportunity aligns with the Department of Defense's focus on strengthening cybersecurity by requiring adherence to recognized federal standards and metrics. The contract underscores the importance of rigorous compliance control systems to safeguard CUI within government supply chains and enhance risk management capabilities.