Cybersecurity Compliance and System Security Planning

The contract entails the development and ongoing maintenance of a System Security Plan that fully aligns with the requirements of NIST SP 800-171, ensuring that all cybersecurity controls are properly documented, implemented, and continuously monitored to protect controlled unclassified information. The work includes not only the initial creation of the SSP but also regular updates to reflect changes in system architecture, threat landscapes, or organizational policies, maintaining compliance throughout the life of the agreement. Submission of accurate and timely cybersecurity assessment scores to the Supplier Performance Risk System is a mandatory requirement, with the contractor responsible for ensuring all evaluations are completed according to federal standards and submitted without delay to meet regulatory obligations. The effort is performed under a subcontract for the Defense Logistics Agency within the Department of Defense, falling under NAICS code 541512 for computer systems design services. Although details such as location and point of contact are unspecified, the performance is expected to support the broader DoD mission of securing sensitive information systems. The contract demands a high degree of technical proficiency in cybersecurity frameworks, a clear understanding of federal compliance timelines, and the ability to adapt quickly to evolving security mandates without disruption to operations or reporting obligations.