System Security Plan (SSP) Development & NIST SP 800-171 Compliance

The contract involves the development and documentation of a System Security Plan (SSP) aimed at achieving compliance with the NIST SP 800-171 standards, which focus on protecting Controlled Unclassified Information (CUI). The scope includes performing a comprehensive gap assessment to identify areas where current security practices fall short of the required standards and creating a Plan of Action and Milestones (POA&M) to address these gaps systematically. This work is crucial for ensuring that the organization's information systems meet federal security requirements and safeguard sensitive data. This subcontract is issued by the Department of Defense's ASC SUPPLIER OPER OEM DIVISION and is associated with NAICS code 541611, which pertains to administrative management and general management consulting services. Performance of the contract will take place in New Cumberland, Pennsylvania, with responses due by May 20, 2026. The contract supports the government’s efforts to enhance cybersecurity posture within its supply chain by ensuring that contractors effectively manage and protect CUI according to federally mandated guidelines.