Cybersecurity and Controlled Technical Data Management

This contract requires strict adherence to cybersecurity protocols for the protection and handling of export-controlled technical data, with mandatory compliance to CMMC Level 2 standards and participation in the US/Canada Joint Certification Program. The subcontractor must implement comprehensive safeguards to ensure the confidentiality, integrity, and availability of sensitive technical information, aligning with Department of Defense requirements for controlled unclassified information. All systems, processes, and personnel must be certified and auditable under the CMMC framework, and ongoing monitoring and documentation are essential to maintain compliance throughout the performance period. Performance is centered at Tinker Air Force Base, Oklahoma, with all activities tied to the Defense Logistics Agency’s procurement under NAICS code 541512, indicating information technology services. The solicitation closed on August 12, 2026, and the contract is part of a broader effort to secure defense supply chain infrastructure against cyber threats. Subcontractors must ensure their cybersecurity posture meets or exceeds federal mandates, including secure data handling, employee training, incident response readiness, and continuous assessment of compliance controls. Failure to meet these requirements could result in termination of contract obligations and potential loss of eligibility for future defense-related work.