Cybersecurity Compliance & System Security Plan (SSP) Development

The contract seeks a small business subcontractor to develop and implement a comprehensive System Security Plan (SSP) aligned with NIST Special Publication 800-171 requirements, ensuring the protection of controlled unclassified information within a Department of Defense environment. The scope includes conducting a detailed risk assessment, identifying and implementing the requisite security controls, and providing ongoing support to achieve and optimize DoD assessment scores. The work is critical to meeting federal cybersecurity standards and must be executed in a manner that ensures continuous compliance and readiness for official evaluations. Performance will take place at Hill Air Force Base, Utah, with all deliverables tied to the successful fulfillment of NIST 800-171 controls and the establishment of a documented, auditable security posture. This is a total small business set-aside under SBA regulations, meaning only qualified small businesses are eligible to respond, and proposals are due by May 17, 2026. The effort supports the broader mission of the Air Force Systems Command to secure information systems and maintain regulatory adherence across its infrastructure.