System Security Plan (SSP) Development and NIST SP 800-171 Compliance

The contract requires the development and documentation of a System Security Plan aligned with NIST SP 800-171 standards, encompassing a comprehensive cybersecurity assessment, detailed system architecture documentation, and accurate SPRS reporting to demonstrate compliance. The work involves identifying, implementing, and documenting security controls necessary to protect controlled unclassified information within the system, ensuring all technical and procedural requirements mandated by NIST are fully addressed and verifiable. The deliverables must be thorough, accurate, and structured to support audit readiness and ongoing compliance monitoring. This subcontract is tied to a Department of Defense initiative under the Medical Supply Chain MD Surg FSF, with performance required at Williamsburg, Virginia, 23185-5830. The solicitation was posted on May 11, 2026, and responses are due by May 18, 2026, under NAICS code 541611 for management consulting services. The nature of the work demands expertise in federal cybersecurity frameworks, hands-on experience with NIST SP 800-171 implementation, and familiarity with SPRS submission protocols to meet DoD compliance obligations. All deliverables must be completed within the timeframe and adhere strictly to federal security and documentation standards without deviation.