Cybersecurity & NIST SP 800-171 Compliance Support

The contract requires comprehensive implementation and documentation of cybersecurity controls aligned with NIST SP 800-171 and DFARS 252.204-7012 to protect Controlled Unclassified Information (CUI) on systems managed by the contractor. This includes establishing, validating, and maintaining robust security measures that meet federal standards for handling, storing, and transmitting sensitive data, as well as ensuring ongoing compliance through detailed recordkeeping and system assessments. Incident reporting procedures must be established and tested to ensure timely detection, response, and notification in the event of a breach or security event involving CUI. This is a subcontract under a Women-Owned Small Business Set-Aside, identified by NAICS code 541512, and is managed by the Fluid Handling Division within the Department of Defense. Performance is required at Tinker Air Force Base with a response deadline of August 3, 2026. The contractor must have demonstrated capability in executing cybersecurity compliance projects for federal defense systems and must be prepared to deliver full documentation demonstrating adherence to all regulatory requirements throughout the lifecycle of the effort.