System Security Plan (SSP) Development & Maintenance

The contract requires the development, continuous update, and ongoing maintenance of a System Security Plan (SSP) that fully aligns with NIST SP 800-171 standards and Department of Defense requirements. The successful performer must ensure the SSP is deeply integrated with the system’s technical controls and architectural framework to maintain compliance and protect controlled unclassified information. This work is critical to supporting secure operations within a Defense Department environment and demands a thorough understanding of cybersecurity frameworks, configuration management, and continuous monitoring practices. The solicitation is issued as a subcontract under NAICS code 541512 and is managed by the Medical Supply Chain FSH under the Department of Defense. Proposals must be submitted by May 6, 2026, with performance expected to occur at APO, 09094-3219. Although no set-aside type is specified, the contract is open to qualified subcontractors capable of delivering secure systems in a highly regulated military supply chain context. The timing and location reflect a need for prompt and secure execution in support of critical defense infrastructure.