Cybersecurity Compliance Assessment (NIST SP 800-171)

The contract requires the performance of a basic cybersecurity assessment aligned with NIST SP 800-171 requirements, focusing on evaluating current practices to ensure compliance with federal standards for protecting controlled unclassified information. The scope includes developing a comprehensive System Security Plan that documents security controls, policies, and procedures in alignment with the NIST framework, followed by formal submission of all findings and documentation to the Department of Defense Assessment Database. This task is critical for maintaining eligibility to handle sensitive DoD information and must be completed in accordance with specified guidelines and deadlines. The work is structured as a subcontract under the Department of Defense, specifically managed by the Aviation Supply Chain ESOC Buys unit, with performance required at Tinker Air Force Base, Oklahoma, 73145-9156. The solicitation was posted on May 11, 2026, and responses are due by May 19, 2026, indicating a narrow window for proposal submission. The North American Industry Classification System code 541611 identifies this as an information technology services engagement, emphasizing the need for proven expertise in cybersecurity compliance, documentation, and DoD reporting systems. All deliverables must meet DoD standards for accuracy, completeness, and timeliness to ensure contract fulfillment and continued partnership.