Cybersecurity Compliance & System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 Rev 1 standards, with a focus on achieving a cybersecurity maturity score of 110 through comprehensive self-assessments and continuous compliance efforts. The work involves supporting reporting obligations to Department of Defense platforms, ensuring all cybersecurity controls are documented, implemented, and verified in accordance with federal defense requirements. The performance location is Redstone Arsenal, Alabama, and the effort is structured as a subcontract under NAICS code 541611, targeting organizations capable of delivering high-assurance cyber compliance services for defense systems. All proposals must be submitted by May 19, 2026, with the solicitation issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV. The contract demands proven experience in implementing NIST 800-171 controls, conducting accurate security assessments, and maintaining ongoing compliance in a government aerospace or defense environment. Failure to meet the specified maturity score or reporting obligations could impact contract performance and future opportunities. The work is critical to enabling secure handling of controlled unclassified information within DoD supply chain systems.