Cybersecurity Compliance (SSP & POA&M Development)

The contract requires the development and submission of a System Security Plan and a Plan of Action and Milestones to ensure compliance with NIST Special Publication 800-171 standards for protecting Controlled Unclassified Information. The effort is focused on establishing and documenting security controls necessary to safeguard CUI within the contractor’s systems, with deliverables designed to demonstrate full alignment with federal cybersecurity requirements. This subcontract is part of a broader initiative by the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION to enhance cybersecurity posture across its supply chain. The work must be completed and submitted by the response deadline of May 20, 2026, following the solicitation posted on May 12, 2026. Performance is expected to occur at the place of performance in New Cumberland, Pennsylvania, with the North American Industry Classification System code 541512 indicating the nature of the work as computer systems design services. The subcontract does not specify a set-aside type or point of contact, and all deliverables must fulfill the technical and compliance obligations outlined in NIST SP 800-171 without reliance on external documentation or references.