System Security Plan (SSP) Development and Maintenance

The contract seeks the development, documentation, and ongoing maintenance of a System Security Plan (SSP) aligned with NIST SP 800-171 requirements, ensuring comprehensive coverage of security controls, their implementation status, and the underlying system architecture. This effort is critical to establishing a robust, compliant security posture for a system managed under the Department of Defense, specifically within the Medical Supply Chain FSH organization. The SSP must accurately reflect current security practices, identify gaps, and provide a clear roadmap for maintaining continuous compliance with federal standards for protecting controlled unclassified information. The subcontract opportunity is set to close on May 20, 2026, with a posting date of May 13, 2026, and the place of performance is designated as FPO, ZIP 96616. The North American Industry Classification System code is 541611, indicating services related to management, scientific, and technical consulting, underscoring the need for expert-level cybersecurity knowledge and experience in federal compliance frameworks. No set-aside preferences are specified, and responses must be submitted through the DIBBS portal prior to the deadline to be considered. The work requires precise technical documentation and a deep understanding of NIST controls as they apply to defense-related systems.