System Security Plan (SSP) Development and NIST SP 800-171 Compliance

This contract involves developing, implementing, and evaluating a System Security Plan (SSP) to ensure compliance with Department of Defense cybersecurity standards for systems managing Controlled Unclassified Information (CUI). The work includes documenting system architecture and mapping security controls in accordance with NIST SP 800-171 Revision 1 guidelines. Key tasks also cover conducting compliance assessments and creating Plans of Action and Milestones (POA&M) to address any identified security gaps. The contract is issued as a subcontract under NAICS code 541612 and is associated with the Department of Defense's Land Supply Chain, with performance located at Hill Air Force Base, ZIP code 84056-5734. The solicitation was posted on May 11, 2026, with responses due by May 22, 2026. The focus of this effort is to support robust cybersecurity management and ensure that systems handling sensitive but unclassified information adhere strictly to federal standards.