System Security Plan and Cybersecurity Compliance

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-18 Rev. 1 and Department of Defense cybersecurity directives, ensuring comprehensive security controls are documented, implemented, and continuously reviewed. The work is focused on establishing a robust cybersecurity framework that meets federal standards for protecting sensitive information and systems under the Defense Health Agency’s purview, with all activities tied to compliance with DoD-specific requirements. The place of performance is designated with a zip code of 21702, indicating the primary operational location, though no specific city or state is provided. This subcontract is open for response until May 28, 2026 at 14:00 Eastern Time, following a posting date of May 13, 2026. The North American Industry Classification System code 541612 identifies the work as involving computer systems design and related services, suggesting the contractor must possess expertise in cybersecurity planning and implementation. The contracting agency is the Department of Defense through the Defense Health Agency, and while no point of contact or set-aside designation is listed, the requirement underscores the need for specialized knowledge in federal cybersecurity policy and the capacity to sustain compliance through regular updates and audits.