System Security Plan (SSP) Development and Documentation

The contract requires the development of a comprehensive System Security Plan (SSP) to document the full implementation of all NIST SP 800-171 security controls across contractor systems, ensuring alignment with federal cybersecurity standards for protecting controlled unclassified information. The SSP must include detailed mapping of each security control to specific system components, processes, and personnel, along with clearly defined roles and responsibilities for all individuals involved in maintaining compliance. The plan must be thorough, accurate, and demonstrate operational effectiveness in mitigating risks associated with information systems handling sensitive data. This subcontract is issued under the Department of Defense, specifically under the ASC SUPPLIER OPER AE AND AF DIV, and is categorized under NAICS code 541611 for management consulting services. The solicitation is open for responses until May 4, 2026, with proposals expected to be submitted through the DIBBS platform. There is no set-aside designation, and performance location details are not specified, indicating flexibility in where the work may be conducted as long as contractual obligations are met. The deliverable must meet strict federal compliance requirements and serve as an official record of security posture for audit and assessment purposes.