Cybersecurity Compliance & System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a NIST SP 800-171-compliant System Security Plan to ensure the protection of Controlled Unclassified Information within contractor systems. The effort is focused on achieving and sustaining full compliance with federal cybersecurity requirements, including implementing all required safeguards, documenting security controls, and establishing processes for continuous monitoring and improvement. The plan must address the full scope of CUI handling, storage, transmission, and access controls as dictated by NIST standards, ensuring that all system components and personnel adhere to the defined security framework. This subcontract is solicited under the NAICS code 541611 and is performance-based within San Diego, California, at the ZIP code 92136-3581. It was posted on May 12, 2026, with a response deadline of May 20, 2026, and falls under the purview of the Department of Defense’s Aviation Supply Chain office. The deliverable is not a one-time document but requires regular updates and validation to remain aligned with evolving threats, regulatory changes, and institutional security policies. Full adherence to NIST SP 800-171 is mandatory, with no tolerance for noncompliance, and successful execution will directly support the integrity and confidentiality of sensitive defense-related information managed by the contractor.