Cybersecurity Compliance and CUI Safeguarding Services

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 controls and CMMC Level 2 compliance to safeguard Covered Defense Information, ensuring alignment with Department of Defense cybersecurity standards. The work involves establishing, auditing, and sustaining a robust information security framework that protects Controlled Unclassified Information in nonfederal systems, with specific emphasis on cyber incident reporting procedures to meet regulatory requirements. The subcontractor must demonstrate proven capability in executing these controls across their environment, maintaining continuous compliance through documentation, training, and technical safeguards. Performance is to occur at Tinker Air Force Base with a zip code of 73145-8000, and the effort supports mission-critical defense operations under the ASC SUPPLIER OPER OEM DIVISION. The solicitation, issued under NAICS code 541512 for computer systems design services, has a response deadline of July 27, 2026, and the award will be structured as a subcontract. All activities must adhere strictly to federal cybersecurity mandates, and the successful offeror must be prepared to validate compliance through assessments, evidence submission, and ongoing monitoring to ensure uninterrupted protection of sensitive defense data.