System Security Plan (SSP) Development and Maintenance

This contract involves the continuous review, updating, and maintenance of System Security Plans (SSPs) to ensure they align with the standards set forth in NIST SP 800-53 Revision 5 and NOAA’s Risk Management Framework (RMF). The focus is on accurately representing current control implementations and clearly defining system boundaries to maintain compliance and support effective risk management within the organization. The work is critical for safeguarding system security and ensuring that security documentation remains up to date with evolving requirements. The contract falls under the NAICS code 541512, which pertains to computer systems design services, and is a subcontract awarded by the Department of Commerce, specifically for the National Oceanic and Atmospheric Administration (NOAA). The place of performance is in Silver Spring, Maryland, and the contract was posted in late April 2026. The contractor will be responsible for delivering these services as part of NOAA's ongoing efforts to enhance and maintain its cybersecurity posture in accordance with federal guidelines.