Cybersecurity Compliance Assessment & System Security Plan (SSP) Development

The contract requires a comprehensive cybersecurity assessment aligned with NIST SP 800-171 Revision 1 to evaluate the current security posture of a system operating within the Department of Defense environment. This assessment must identify gaps in existing controls and recommend actionable measures to achieve compliance with federal cybersecurity requirements for protecting controlled unclassified information. Following the assessment, the contractor is expected to implement the necessary security controls to mitigate identified risks and ensure adherence to the NIST framework. In addition to the assessment and implementation phases, the contractor must develop a detailed System Security Plan for submission to the Department of Defense. The SSP must document all security controls in place, describe how they are operationalized, and demonstrate alignment with NIST SP 800-171 requirements. The work is scoped as a subcontract under the agency name ASC SUPPLIER OPER OEM DIVISION, with performance designated to occur in Jacksonville, Florida, and responses are due by May 18, 2026. The NAICS code 541611 indicates this is an information technology services contract focused on cybersecurity consulting and compliance support.