Cybersecurity Compliance Assessment & SSP Development

The contract requires the execution of a comprehensive NIST SP 800-171 Rev 1 compliance assessment to evaluate the security posture of a system handling controlled unclassified information, with a focus on identifying gaps in implemented security controls. The work includes developing or revising a System Security Plan that aligns with DFARS 252.204-7012 and Department of Defense requirements, ensuring all necessary safeguards are documented and operational. The final SSP must be submitted to the Supplier Performance Risk System to demonstrate compliance and enable continued eligibility for DoD contract work. The project is scoped as a subcontract under the NAICS code 541611 for management, scientific, and technical consulting services, and is tied to the Aviation Supply Chain ESOC Buys organization within the Department of Defense. Performance must occur at Joint Base Elmendorf-Richardson in Alaska, with the proposal due by May 4, 2026. The requirement emphasizes strict adherence to federal cybersecurity standards and the need for accurate, actionable documentation to support Defense Industrial Base compliance obligations.