Cybersecurity and Supply Chain Risk Management (SCRM)

This contract requires strict adherence to Department of Defense cybersecurity and supply chain risk management standards, specifically mandating compliance with DFARS regulations, NIST SP 800-171, and the Cybersecurity Maturity Model Certification framework. All parties must implement the prescribed security controls to protect controlled unclassified information and ensure the integrity of the supply chain. The prohibition of covered telecommunications equipment and services, as outlined in applicable federal regulations, is mandatory and non-negotiable, requiring thorough vetting of all hardware, software, and services used in performance of the subcontract. The work is to be performed at Tinker Air Force Base with a ZIP code of 73145-8000, under a subcontract classification, and is tied to the NAICS code 541512 for computer systems design services. The solicitation was posted on July 31, 2026, with a response deadline of August 7, 2026, indicating a tight turnaround for submission. All proposals must demonstrate validated capability to meet these rigorous security and supply chain requirements without exception, and failure to comply with any specified mandate will result in disqualification. The contracting authority is the Department of Defense, with operations managed under the Land Supply Chain organization.