Cybersecurity Compliance & System Security Plan (SSP) Support

The contract seeks support for achieving and maintaining compliance with NIST SP 800-171 requirements, specifically focusing on the development, assessment, and ongoing management of a System Security Plan for systems handling controlled unclassified information. This work must align strictly with the Federal Acquisition Regulation clauses DFARS 252.204-7012 and 252.204-7020, which mandate robust cybersecurity protections and timely reporting of cyber incidents affecting covered defense information. The contractor will be responsible for implementing security controls, conducting assessments to validate compliance, and ensuring all incident response procedures meet federal standards for reporting and documentation. This subcontract is issued by the Department of Defense through the DDSP NEW CUMBERLAND FACILITY, with performance centered at the facility located in New Cumberland, Pennsylvania, ZIP code 17070-5002. The work falls under NAICS code 541512 for computer systems design services, indicating a strong emphasis on technical cybersecurity implementation rather than broad consulting or training. The solicitation is open for responses until July 22, 2026, and the effort is aimed at supporting defense contractors or subcontractors who must demonstrate adherence to stringent federal cybersecurity obligations as a condition of handling sensitive government information.