System Security Plan (SSP) Development and Maintenance

The contract requires the development, implementation, and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 Rev 1 to ensure the protection of Controlled Unclassified Information. The scope centers on establishing a comprehensive security framework that meets federal standards for safeguarding sensitive data within the contractor’s systems and processes. Compliance with NIST controls is mandatory, and the plan must be fully documented, integrated into operational workflows, and continuously updated to address evolving threats and regulatory requirements. This subcontract is issued under the NAICS code 541512 for computer systems design services and is managed by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. Performance is to be carried out specifically in San Diego, with a ZIP code of 92123-5000. The solicitation was posted on May 10, 2026, and responses are due by May 18, 2026. The contract does not specify a set-aside classification, and no point of contact information is provided. All work must be completed in accordance with federal cybersecurity mandates, with a focus on ensuring the confidentiality, integrity, and availability of CUI throughout its lifecycle.