System Security Plan (SSP) Development

The contract requires the development of a comprehensive System Security Plan (SSP) that thoroughly documents the contractor’s information system architecture and meticulously details the implementation of each security control outlined in NIST SP 800-171. The SSP must provide clear evidence of how all required controls are integrated into the system, including policies, procedures, roles, and technical measures to protect controlled unclassified information. This deliverable is essential for demonstrating compliance with federal cybersecurity standards and ensuring the system meets the Department of Defense’s security requirements. The solicitation is issued as a subcontract under the agency name ASC SUPPLIER OPER OEM DIVISION, with the place of performance located in Tracy, California, 95304-5000. The NAICS code 541611 indicates the work falls under management consulting services, reflecting the need for expert guidance in cybersecurity compliance and documentation. The response deadline is April 30, 2026, and although no solicitation number is provided, the official link to the procurement notice is available through the DIBBS platform. The contract emphasizes precision and completeness in reporting, with no set-aside designation specified, meaning all eligible contractors may bid.