Cybersecurity Compliance (CMMC Level 2 / NIST SP 800-171)

The contract requires the implementation and thorough documentation of NIST SP 800-171 security controls to safeguard covered defense information and achieve compliance with DFARS requirements. This effort is aligned with the objectives of CMMC Level 2, emphasizing the establishment of a robust cybersecurity framework that meets federal standards for protecting sensitive defense data on contractor systems. The work must be completed in accordance with defined technical and procedural guidelines, ensuring all controls are properly configured, tested, and evidenced for audit readiness. This is a subcontract under the Department of Defense, specifically tied to the organization CONSTRUCTION & EQUIPMENT MRO SVC I, with performance expected at Tinker AFB, Oklahoma, zip code 73145-8000. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. The NAICS code 541512 indicates the nature of the work falls under computer systems design and related services, underscoring the technical expertise required for cybersecurity implementation. All deliverables must fully address the compliance obligations outlined in NIST SP 800-171 to meet the Department of Defense’s stringent security mandates for subcontractors handling controlled unclassified information.