System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a System Security Plan (SSP) that fully documents compliance with the security controls outlined in NIST SP 800-171 for the contractor’s information system. This effort is part of a subcontract under the Department of Defense, specifically managed by the Medical Supply Chain FSH, and is intended to ensure that all protected federal information handled by the contractor meets mandatory cybersecurity standards for non-federal systems. The SSP must accurately reflect current security practices, control implementation, and continuous monitoring procedures to maintain alignment with NIST guidelines throughout the contract lifecycle. The solicitation was posted on April 29, 2026, with a response deadline of May 6, 2026, and is identified under NAICS code 541611, which corresponds to management consulting services, indicating the work involves strategic security planning and governance rather than direct IT implementation. The place of performance and point of contact details are not provided, suggesting the work may be performed remotely or the contracting office is handling logistics internally. Participation requires a thorough understanding of NIST SP 800-171 requirements and the ability to document, adapt, and validate security controls in a manner acceptable to the Department of Defense.