Cybersecurity & CUI Protection (NIST SP 800-171 Compliance)

The contract mandates the implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information across all systems and processes, ensuring comprehensive safeguarding of sensitive data handled by the subcontractor. Compliance requires rigorous adherence to the full suite of technical and operational requirements outlined in the standard, with an annual self-assessment to evaluate control effectiveness and a formal compliance report submitted to demonstrate ongoing alignment with federal cybersecurity standards. The work is classified as a subcontract under a Women-Owned Small Business Set-Aside, with the North American Industry Classification System code 541512 indicating it involves computer systems design services. Performance is designated to occur at Tinker Air Force Base, Oklahoma, with a deadline for responses set for July 30, 2026, and the solicitation posted on July 19, 2026, under the Department of Defense’s Electrical Devices Division. All activities must support the DoD’s mission-critical cybersecurity posture by securing CUI throughout the subcontractor’s environment.