Cybersecurity Compliance & CUI Protection (NIST SP 800-171)

The contract requires the implementation and ongoing maintenance of cybersecurity controls as specified in NIST SP 800-171 to safeguard Controlled Unclassified Information in accordance with DFARS clauses 252.204-7012 and 252.240-7006. These controls must be fully integrated into the contractor’s systems and processes to ensure compliance with Department of Defense cybersecurity requirements, covering areas such as access control, audit and accountability, configuration management, incident response, and media protection. The obligation extends beyond initial setup to include continuous monitoring, risk assessment updates, and documentation of compliance measures to meet federal standards. This subcontract is associated with the NAICS code 541512 and is managed by the Fluid Handling Division under the Department of Defense, with performance located at Tinker AFB, Oklahoma, 73145-8000. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. Contractors must demonstrate technical capability to deploy and sustain NIST 800-171 controls within a DoD environment, including evidence of a documented security plan and experience with handling CUI. Failure to meet these requirements may result in non-compliance penalties or contract termination.