Cybersecurity and CUI Compliance Support

This contract seeks support for safeguarding Controlled Unclassified Information during manufacturing and delivery operations, with a focus on achieving full compliance with NIST SP 800-171 standards and implementing CMMC Level 2 requirements. The work is tied to defense-related manufacturing functions performed at Tinker Air Force Base, where contractors must establish and maintain robust cybersecurity controls to protect sensitive data throughout the supply chain. The efforts required include designing, documenting, and operationalizing security practices aligned with federal cybersecurity frameworks, ensuring that all systems, processes, and personnel handling CUI meet the stringent protections mandated for Department of Defense subcontractors. The solicitation is classified as a subcontract under NAICS code 541512, indicating the need for specialized IT and cybersecurity services supporting defense manufacturing. Interested parties must respond by May 20, 2026, with the performance location firmly centered at Tinker AFB, Oklahoma. While the contracting office falls under the Department of Defense’s ASC SUPPLIER OPER OEM DIVISION, the expectations extend beyond compliance documentation to encompass active, ongoing implementation of technical and procedural safeguards. This includes continuous monitoring, employee training, incident response readiness, and audit readiness to validate adherence to CMMC Level 2 criteria, ensuring the integrity and confidentiality of controlled information in a high-risk defense manufacturing environment.