Cybersecurity Compliance & CMMC Level 2 Implementation

The contract seeks a subcontractor to implement and document cybersecurity controls aligned with NIST SP 800-171 and CMMC Level 2 requirements across the Aviation Supply Chain entity operating at Tinker AFB, 73145-8000. The scope includes full lifecycle support for cybersecurity compliance, covering the establishment of technical, procedural, and administrative controls, internal self-assessment to validate adherence, preparation for third-party audits, and accurate submission of findings through the Supplier Performance Risk System. All deliverables must meet the rigorous standards of the Department of Defense’s cybersecurity framework, ensuring the protection of controlled unclassified information within the supply chain environment. Work must be completed and submitted prior to the response deadline of May 20, 2026, with the solicitation posted on May 12, 2026. The NAICS code 541512 indicates the nature of the work as related to computer systems design services, underlining the technical andconsultative nature of the engagement. While no set-aside designation is specified, the place of performance is fixed at Tinker AFB, requiring coordination and on-site presence where necessary to align with the defense infrastructure's operational and security requirements. This effort is critical to maintaining the integrity and trustworthiness of the defense supply chain under evolving federal cybersecurity mandates.