Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract requires consulting and implementation services to ensure compliance with NIST SP 800-171 Rev 1 for the protection of Controlled Unclassified Information, including the full development of a comprehensive System Security Plan and submission to the Supplier Performance Risk System. The work involves guiding the contractor through every phase of cybersecurity alignment, from policy and control implementation to documentation and federal reporting, ensuring all requirements are met to safeguard sensitive data within the defense supply chain. Services must be delivered in alignment with Department of Defense standards and tailored to the operational environment of Tinker Air Force Base, where the work will be performed. This subcontract, under NAICS code 541618, is issued by the Active Devices Division and is focused exclusively on achieving and maintaining NIST 800-171 compliance, with a strict deadline for responses by August 7, 2026. The scope demands technical expertise in cybersecurity frameworks, documented control implementation, and experience with SPRS reporting, requiring the vendor to possess proven capabilities in supporting defense contractors through federal compliance processes. The effort is time-sensitive and must result in a fully validated, audit-ready security posture that meets all mandatory federal obligations for handling Controlled Unclassified Information.