NIST SP 800-171 Compliance and System Security Plan (SSP) Development

The contract requires the development and implementation of a System Security Plan (SSP) aligned with NIST SP 800-171 Rev 1 and DFARS 252.204-7012 requirements to ensure proper handling of controlled unclassified information. The primary objective is to establish a robust security framework that meets or exceeds minimum assessment benchmarks, with a clear remediation strategy in place to address identified gaps and achieve full compliance. The work must be executed to safeguard sensitive data according to federal cybersecurity standards, with deliverables including a comprehensive SSP and documented actions for resolving deficiencies. The contract is structured as a subcontract under the Department of Defense’s Land Supply Chain, with performance expected to occur in Richmond, ZIP 40475-8343. The solicitation is open with a response deadline of August 6, 2026, and falls under NAICS code 541512 for custom computer programming services. All efforts must be completed within the specified timeframe and adhere strictly to federal guidelines to meet compliance thresholds, with no tolerance for partial or incomplete implementation. Success hinges on delivering actionable security controls, verified through assessment results, and maintaining an up-to-date remediation roadmap throughout the contract lifecycle.