System Security Plan (SSP) Development & CUI Compliance Support

The contract involves the development and ongoing maintenance of a System Security Plan (SSP) that aligns with NIST Special Publication 800-171 to protect Controlled Unclassified Information (CUI) within a Department of Defense environment. The scope requires full compliance with DFARS clause 252.204-7012, ensuring that all security controls are implemented, documented, and continuously monitored to meet federal cybersecurity standards. The contractor will be responsible for assessing current systems, identifying gaps, drafting comprehensive security policies and procedures, and supporting audit readiness through accurate documentation and corrective action planning. This is a subcontract opportunity issued under the ASC Commodities Division, with a NAICS code of 541611, indicating it falls under Management Consulting Services. The solicitation was posted on May 11, 2026, and responses are due by May 19, 2026. While specific performance location details are not provided, the work will support DoD operations and must be conducted in a manner that ensures secure handling of CUI at all times. The contractor must demonstrate expertise in NIST SP 800-171 frameworks and DFARS compliance, with the ability to deliver a fully vetted, up-to-date SSP that enables the prime contractor or government entity to maintain authorized processing of sensitive information.