Cybersecurity Compliance Implementation & System Security Plan (SSP) Development

The contract requires the development and implementation of NIST SP 800-171 security controls to ensure compliance with DFARS cybersecurity requirements for protecting Controlled Unclassified Information. This includes creating a comprehensive System Security Plan that documents all security measures, conducting a detailed gap analysis to identify deficiencies against NIST standards, and taking corrective actions to close those gaps. The ultimate goal is to prepare the organization for a Supplier Performance Risk System assessment to validate adherence to federal cybersecurity mandates. The work is scoped under a subcontract tied to the Department of Defense’s ASC Commodities Division, with performance specifically located in N Stonington, ZIP 06359. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The North American Industry Classification System code 541611 identifies this as an information technology consulting service, reflecting the focus on cybersecurity implementation rather than hardware or general IT support. The effort demands expertise in federal compliance frameworks, documentation rigor, and readiness for government evaluation processes.