System Security Plan (SSP) Development & NIST SP 800-171 Compliance

The contract requires the development and documentation of a System Security Plan (SSP) to ensure compliance with NIST Special Publication 800-171 for the protection of Controlled Unclassified Information (CUI). This includes conducting a thorough gap assessment to identify deficiencies in current security controls against NIST SP 800-171 requirements and subsequently developing a comprehensive Plan of Action and Milestones (POA&M) to address each identified gap with defined corrective actions, responsible parties, and timelines. The work is focused on establishing a robust, actionable, and auditable security framework aligned with federal standards for safeguarding sensitive but unclassified data. The contract is categorized as a subcontract under NAICS code 541611, issued by the ASC SUPPLIER OPER OEM DIVISION within the Department of Defense. Performance is required at the location in New Cumberland, Pennsylvania, with a specified response deadline of May 20, 2026. The solicitation, identified by the reference number SPE4A526T133U, is posted on the DIBBS platform and is open for submissions with no set-aside designation. The deliverables must meet stringent federal cybersecurity compliance benchmarks, emphasizing documentation accuracy, operational feasibility, and timely remediation of security shortfalls.