Cybersecurity Compliance and System Security Plan Development

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 and CMMC Level 2 standards, ensuring comprehensive cybersecurity controls are implemented and documented for handling controlled unclassified information. It mandates the creation of detailed assessment reports to validate compliance and full adherence to DFARS 252.204-7012, which governs the protection of covered defense information and the reporting of cyber incidents on contractor systems. The work is scoped as a subcontract under the Department of Defense, specifically for the ASC Commodities Division, with performance to be conducted at Port Hueneme, California, 93043. All activities must be completed within the solicitation window, with proposals due by May 19, 2026, and the North American Industry Classification System code 541611 indicates that the work falls under management, scientific, and technical consulting services, particularly those involving cybersecurity compliance and information technology support. The requirement emphasizes continuous compliance monitoring, accurate documentation, and readiness for third-party assessments, ensuring the contractor maintains a robust and auditable cybersecurity posture meeting federal defense standards throughout the life of the agreement.