System Security Plan (SSP) Development

The contract requires the development and ongoing maintenance of System Security Plans (SSPs) that comprehensively document security controls, system architecture, and risk mitigation strategies aligned with NIST SP 800-171 and DFARS regulatory requirements. These plans must accurately reflect the security posture of covered systems, ensuring compliance with federal standards for protecting controlled unclassified information within nonfederal systems. The contractor will be responsible for producing detailed, up-to-date documentation that supports continuous monitoring and audit readiness, with a focus on implementing, assessing, and improving security controls in accordance with evolving threats and compliance guidelines. This subcontract is issued under the NAICS code 541512 for computer systems design services and is associated with the Department of Defense’s DDSP NEW CUMBERLAND FACILITY. Performance of the work is designated to take place in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on July 27, 2026, and responses are due by July 30, 2026, indicating a tight turnaround timeline. All proposals must meet the specific technical and compliance needs of the DoD, ensuring that SSPs are not only accurate and thorough but also integrated into the broader cybersecurity framework governed by federal defense directives.