Cybersecurity Compliance and System Security Plan (SSP) Development

This contract involves the development and ongoing maintenance of a System Security Plan (SSP) specifically for systems that handle Controlled Unclassified Information (CUI). The work includes conducting assessments in line with the NIST SP 800-171 Revision 1 standards, ensuring that cybersecurity compliance requirements are met. Additionally, the contractor will be responsible for reporting through the Supplier Performance Risk System (SPRS), which is critical for tracking and validating cybersecurity practices within Department of Defense supply chains. The contract is categorized under NAICS code 541512, which pertains to computer systems design services, and is issued by the Department of Defense’s Subsistence FSE Supply Chain office. The place of performance is listed as FPO with a ZIP code of 96660, indicating a potential overseas or military postal location. Responses to this subcontract solicitation must be submitted by May 18, 2026, following the posting date of May 12, 2026. This contract emphasizes strict adherence to federal cybersecurity standards essential for protecting sensitive information within defense supply networks.