Cybersecurity Compliance Assessment & System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 Rev 1 and Department of Defense cybersecurity requirements, ensuring all controls are properly documented, implemented, and updated to meet federal standards. The contractor must perform regular self-assessments of their cybersecurity posture and submit findings to the Supplier Performance Risk System to demonstrate compliance and readiness. Work is to be performed at the designated location in New Cumberland, Pennsylvania, with a response deadline of May 21, 2026, and the solicitation is classified as a subcontract under NAICS code 541611 for administrative management and general management consulting services. The contract is issued by the ASC Commodities Division under the Department of Defense, with no set-aside provisions specified, and all activities must be completed within the outlined timeframe to ensure continuous compliance and reporting obligations.