System Security Plan (SSP) Development and Maintenance

This contract entails the development and ongoing maintenance of a System Security Plan (SSP) that documents the implementation of NIST SP 800-171 controls for systems handling Controlled Unclassified Information (CUI). The contractor will be responsible for ensuring that the SSP accurately reflects compliance with required security standards to protect sensitive information in accordance with Department of Defense regulations. The work is designated as a subcontract opportunity under NAICS code 541612, which covers administrative management and general management consulting services. The contracting agency is the ASC Commodities Division of the Department of Defense, with the place of performance specified as Cherry Point, North Carolina, ZIP code 28533-5040. The solicitation was posted on May 13, 2026, with responses due by May 21, 2026. Although specific set-aside designations or organizational types are not indicated, the contract focuses on supporting defense-related cybersecurity compliance and documentation efforts, thereby playing a critical role in safeguarding CUI within defense systems.