Cybersecurity Compliance & System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 Rev 1 standards, ensuring that all cybersecurity controls are properly documented, implemented, and operational. It mandates regular cybersecurity assessments to evaluate compliance posture and identify gaps, with the goal of sustaining adherence to DFARS 252.204-7019 and DoD Instruction 5000.79. The work must support the protection of controlled unclassified information within covered contractor information systems, with continuous monitoring and documentation to demonstrate compliance throughout the contract lifecycle. The effort is structured as a subcontract under the Department of Defense, with performance located in Tracy, California, 95304-5000. The solicitation falls under NAICS code 541330, which corresponds to computer systems design services, indicating a focus on technical implementation and policy integration rather than general IT support. Responses are due by July 30, 2026, and the contracting entity is part of the Construction, Equipment Manufacturing, and Construction division, suggesting the work may support defense-related manufacturing or logistics systems. Compliance is not optional, and the contractor must possess the technical expertise to interpret and apply federal cybersecurity directives in a real-world operational environment.