Cybersecurity Compliance & NIST SP 800-171 Safeguarding

The contract requires implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard covered defense information held by the contractor. This includes establishing technical, administrative, and physical safeguards aligned with the NIST framework to ensure the confidentiality, integrity, and availability of sensitive data. The contractor must conduct an annual self-assessment to validate compliance with all 110 required controls and submit a formal report detailing findings, gaps, and remediation actions. Any cybersecurity incidents involving covered defense information must be reported promptly according to specified timelines and protocols, ensuring timely response and mitigation. This subcontract is issued by the ASC Commodities Division under the Department of Defense and is performance-based at Tinker AFB with a zip code of 73145-8000. The contract falls under NAICS code 541512, which pertains to computer systems design and related services, indicating the technical nature of the work. The solicitation was posted on July 21, 2026, with a firm deadline for responses on July 29, 2026. Compliance with NIST SP 800-171 is mandatory, and failure to meet requirements may result in contract termination or financial penalties. The contractor must maintain continuous readiness for audits, assessments, and incident response, ensuring alignment with federal cybersecurity standards throughout the contract term.