System Security Plan (SSP) Development and Maintenance

The contract requires the development, continuous updating, and ongoing maintenance of a System Security Plan (SSP) that fully documents the implementation of all NIST SP 800-171 security controls. The SSP must be dynamically aligned with current assessment findings and meet all requirements for submission to the Supplier Performance Risk System (SPRS), ensuring compliance with federal cybersecurity standards for covered defense information. The plan must reflect real-time adjustments based on audit results, system changes, and evolving threat landscapes to maintain accuracy and regulatory adherence throughout the contract's duration. This subcontract is issued under the NAICS code 541611 and is managed by the Aviation Supply Chain ESOC Buys office within the Department of Defense. Performance is designated to occur at Fort Stewart, Georgia, with a response deadline of May 18, 2026, and the solicitation was posted on May 10, 2026. The effort is critical to sustaining security posture and reporting compliance for defense-related systems, with emphasis on actionable, audit-ready documentation that supports continuous monitoring and federal oversight requirements.