System Security Plan (SSP) Development and NIST SP 800-171 Compliance

This contract involves the development and documentation of a System Security Plan (SSP) to ensure compliance with the cybersecurity requirements outlined in NIST SP 800-171. The work will include performing a comprehensive cybersecurity assessment, documenting the system architecture, and preparing the necessary reports for the Supplier Performance Risk System (SPRS). The goal is to establish a robust security framework that meets federal standards to protect sensitive information within the specified system. The contract is a subcontract opportunity posted by the Department of Defense through the Medical Supply Chain MD SURG FSF office, with the place of performance located in Williamsburg, zip code 23185-5830. The solicitation was made available on May 11, 2026, with a response deadline of May 18, 2026. It falls under NAICS code 541611, typically related to administrative management and general management consulting services. Interested parties can access the full solicitation details through the provided link on the DIBBS platform.