Cybersecurity & Covered Defense Information (CDI) Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Covered Defense Information in full compliance with NIST SP 800-171 and DFARS 252.204-7012, ensuring that all required security measures are properly documented, enforced, and continuously monitored. This includes establishing robust access controls, data protection protocols, system monitoring capabilities, and employee training programs aligned with federal standards, as well as timely reporting of any cybersecurity incidents affecting Covered Defense Information in accordance with mandated procedures. The contractor must also complete a self-assessment to demonstrate alignment with the Cybersecurity Maturity Model Certification Level 2 requirements, verifying the effectiveness of implemented controls through formal documentation and internal validation processes. Performance is required at Tinker Air Force Base with a zip code of 73145-8000, and the work is classified as a subcontract under the NAICS code 541512 for Computer Systems Design Services. The solicitation was posted on August 4, 2026, with a response deadline of August 12, 2026, and is managed by the ASC SUPPLIER OPER OEM DIVISION under the U.S. Department of Defense. All activities must be executed to meet strict federal cybersecurity compliance standards, with a focus on protecting sensitive defense data through structured, auditable, and enforceable security practices.