System Security Plan (SSP) Development and Documentation

The contract requires the development and maintenance of a System Security Plan (SSP) to document how IT systems comply with the security requirements outlined in NIST SP 800-171. This includes creating detailed control narratives that explain how each security control is implemented, as well as providing a comprehensive system architecture that illustrates the structure, components, and interconnections of the information systems under review. The SSP must be thorough, accurate, and continuously updated to reflect any changes in the system environment or security posture, ensuring ongoing alignment with federal cybersecurity standards. This subcontract is issued by the ASC Commodities Division under the Department of Defense and is performance-based at Tinker AFB with a zip code of 73145-8000. The solicitation, identified by the NAICS code 541512, falls under information technology consulting services and was posted on May 11, 2026, with a response deadline of May 19, 2026. All work must be completed in accordance with government security protocols and deliverables must be submitted in a format that supports audit readiness and regulatory compliance.