Cybersecurity Compliance & NIST SP 800-171 Implementation

The contract requires the development and ongoing maintenance of a System Security Plan aligned with NIST SP 800-171 standards to ensure robust cybersecurity controls are documented and implemented. The contractor must perform a comprehensive assessment against these standards, document findings, and submit the results to the Supplier Performance Risk System to demonstrate compliance. Additionally, the contractor is responsible for managing a Plan of Action and Milestones to address identified gaps, track corrective actions, and sustain continuous compliance over the life of the agreement. All activities must be carried out to support the Department of Defense’s cybersecurity requirements at the designated performance location of Tinker Air Force Base, with deliverables tied to federal compliance expectations. The subcontract is solicited under NAICS code 541512, indicating a focus on computer systems design services, and responses are due by May 19, 2026.