Cybersecurity Compliance & Reporting Services

The contract seeks services to implement and maintain cybersecurity controls aligned with NIST SP 800-171 requirements, ensuring compliance with CMMC Level 2 standards through a self-assessment process. This includes establishing, documenting, and sustaining controls necessary to protect controlled unclassified information within covered contractor information systems, with ongoing monitoring and remediation to meet evolving security mandates. The contractor will be responsible for conducting a comprehensive self-assessment against CMMC Level 2 requirements and maintaining documentation to demonstrate readiness and compliance. Additionally, the contract requires immediate cyber incident reporting within 72 hours of discovery, ensuring prompt notification and coordinated response to potential breaches or anomalies affecting covered systems. Performance is tied to operations at Tinker Air Force Base with a zip code of 73145-8000, and the work is structured as a subcontract under the Department of Defense, with the NAICS code 541612 indicating IT consulting services. The solicitation was posted on May 10, 2026, with responses due by May 18, 2026, and the contracting office is the ASC Supplier Oper OEM Division.