Cybersecurity Compliance and System Security Planning

The contract requires the development of a comprehensive System Security Plan tailored to safeguard Covered Defense Information in accordance with NIST SP 800-171 standards. The work involves implementing and documenting security controls that align with Department of Defense requirements, ensuring that all systems handling sensitive defense data meet the prescribed cybersecurity framework. This includes conducting a thorough assessment to validate compliance with the NIST 800-171 controls, identifying gaps, and resolving deficiencies to achieve an approved posture for handling protected information. This subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for computer systems design services. The performance location and specific agency office details are not provided, but the work must be executed to meet federal cybersecurity mandates. The solicitation was posted in June 2026 and is intended to support secure information handling processes across defense-related operations. The successful contractor will be responsible for delivering a complete, auditable SSP and demonstrating full conformance with the DoD’s cybersecurity expectations for protected data.