System Security Plan (SSP) Development

The contract requires the development of a comprehensive System Security Plan (SSP) to document the implementation of all NIST SP 800-171 security controls across the IT environment, with the explicit goal of achieving a 'High' assessment rating under DFARS 7021. This plan must fully address the 110 controls outlined in NIST SP 800-171, ensuring that all technical, operational, and management safeguards are accurately described, aligned with organizational processes, and demonstrate full compliance for handling controlled unclassified information. The SSP must be structured to support an authoritative assessment, including detailed documentation of control implementation, system boundaries, data flows, and risk mitigation strategies. The contract is issued as a subcontract under the Defense Logistics Agency, part of the Department of Defense, with a NAICS code of 541611 indicating it falls under Information Technology Consulting Services. Although the solicitation number is not listed, the response deadline is May 29, 2026, and the posting date is June 2, 2026, suggesting a potential clerical error in dates as the response deadline precedes the posting. The place of performance and point of contact details are unspecified, and no set-aside classification is indicated, meaning the subcontract is open to all eligible contractors. The work must be executed to meet stringent DoD cybersecurity requirements, and success hinges on demonstrating full adherence to federal standards through precise, audit-ready documentation.