Cybersecurity Compliance and System Security Plan (SSP) Support

The contract seeks support for developing and submitting a System Security Plan (SSP) aligned with NIST SP 800-171 requirements to satisfy Defense Federal Acquisition Regulation Supplement (DFARS) compliance. This includes conducting a thorough assessment of existing cybersecurity controls, scoring the implementation status according to NIST guidelines, and preparing and submitting the Supplier Performance Risk System (SPRS) report to demonstrate adherence to federal cybersecurity standards for covered defense information. The deliverables must ensure full compliance with the mandatory security requirements outlined in NIST SP 800-171, with emphasis on accurate documentation, control implementation validation, and timely reporting to meet contractual obligations. The work is to be performed at the location in Tracy, California, with a zip code of 95304-5000, and is classified as a subcontract under the NAICS code 541611 for Management Consulting Services. The opportunity was posted on May 12, 2026, with a response deadline of May 20, 2026, and is issued by the ASC SUPPLIER OPER OEM DIVISION under the Department of Defense. The procurement aims to secure qualified support to institutionalize compliance processes, reduce risk exposure, and maintain eligibility for defense contracting through rigorous and auditable cybersecurity documentation and reporting.