Cybersecurity Compliance and System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a System Security Plan (SSP) that adheres strictly to NIST SP 800-171 and DFARS 252.204-7012 requirements, with a primary focus on safeguarding Controlled Unclassified Information (CUI). The contractor must not only create a comprehensive SSP but also provide documented NIST assessment scores that validate compliance with the specified security controls. This involves implementing and monitoring technical, administrative, and physical safeguards to ensure CUI is protected at all times across all systems and environments. The work must be performed in San Diego, California, under the oversight of the ASC Commodities Division within the Department of Defense. The contract is classified as a subcontract and was posted on May 12, 2026, with a response deadline of May 20, 2026. It is associated with NAICS code 541512, indicating it falls under Computer Systems Design and Related Services. The performance location is clearly designated as 92136-3581 in San Diego, and the contractor is expected to deliver full cybersecurity compliance documentation, including regular assessments and updates to the SSP as required by federal standards. There is no set-aside designation, and all proposals must meet the stringent cybersecurity mandates established for handling CUI in defense-related contracts.