Cybersecurity Compliance and System Security Plan (SSP) Development

The contract involves the development of a comprehensive System Security Plan and associated compliance artifacts to meet the cybersecurity requirements outlined in NIST SP 800-171 Rev 1 and DFARS 252.204-7012 for the protection of Controlled Unclassified Information. The work is targeted at ensuring that all technical, administrative, and physical safeguards are documented and implemented in alignment with federal standards for handling CUI within a defense contractor environment. The deliverables must demonstrate full compliance with the 110 security controls specified in NIST SP 800-171 and include policies, procedures, and evidence of implementation required under DFARS to support audit readiness and contract award obligations. This is a subcontract under the Department of Defense with performance centered at Tinker Air Force Base, Oklahoma, and is managed by the ASC SUPPLIER OPER OEM DIVISION. The solicitation was posted on April 29, 2026, with responses due by May 7, 2026, indicating a tight turnaround for submission. The NAICS code 541611 identifies the work as information technology consulting services, emphasizing the need for expertise in cybersecurity frameworks, compliance documentation, and defense-specific regulatory environments. All deliverables must be tailored to the specific systems and operations handling CUI at the designated location, and successful performance will require close coordination with federal compliance protocols and defense supply chain security mandates.