Cybersecurity Compliance & System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 standards to ensure the protection of controlled unclassified information within federal systems. The work must fully support compliance with DFARS 252.204-7019, which mandates specific cybersecurity practices for contractors handling Department of Defense information. The subcontractor is responsible for implementing, documenting, and sustaining security controls that address all required families of safeguards outlined in NIST 800-171, including access control, audit, configuration management, personnel security, and incident response. Continuous monitoring and updates to the SSP are essential to reflect changes in system architecture, threat landscapes, or regulatory requirements. This effort is performed under a subcontract for the Defense Logistics Agency, part of the Department of Defense, with performance tied to the contract number SPE7LX26FB5G6. The work falls under NAICS code 541512 for Computer Systems Design Services. The contractor must maintain rigorous documentation practices and be prepared to demonstrate compliance upon request, ensuring all systems and processes remain in alignment with federal cybersecurity mandates. There is no specified set-aside or geographic limitation, and the point of contact details are not provided, meaning communications will likely be routed through the prime contractor or DLA’s formal procurement channels.