System Security Plan and Corrective Action Plan Development

This contract involves the development of a comprehensive System Security Plan (SSP) that ensures compliance with the NIST SP 800-171 standard, which addresses security requirements for protecting controlled unclassified information in non-federal systems. Alongside the SSP, the contractor is tasked with creating a corrective action plan aimed at achieving full compliance, encompassing all 110 security controls. The corrective plan will be based on the current assessment scores, identifying gaps and laying out steps to meet all requirements. The contract is a subcontract opportunity issued by the Department of Defense's Land Supply Chain office and is to be performed in Virginia Beach, ZIP code 23459-3018. The solicitation was posted on May 11, 2026, with responses due by May 22, 2026. It falls under the NAICS code 541618, which covers management consulting services, indicating the technical and advisory nature of the work. The contract is aimed at strengthening cybersecurity measures within the supply chain to comply with federal security standards.