Cybersecurity & System Security Plan (SSP) Development

The contract requires the development, implementation, and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 and CMMC Level 2 standards to safeguard controlled unclassified information within Department of Defense systems. The work encompasses conducting comprehensive risk assessments, establishing a Plan of Action and Milestones to address identified vulnerabilities, and ensuring timely incident reporting to DoD authorities as required by federal cybersecurity regulations. All activities must be performed with strict adherence to the framework defined by these standards to ensure compliance and operational readiness. This subcontract is issued under the NAICS code 541513 for Computer Systems Design Services and is sponsored by Dha Enterprise Medical Support Ems-cd within the Department of Defense. The proposal submission deadline is June 1, 2026, and performance is expected to be carried out in support of government operations without specifying a physical location. The contractor will be responsible for maintaining continuous compliance through documentation, monitoring, and responsive remediation, ensuring the security posture of DoD-related systems remains robust and audit-ready throughout the contract term.