Cybersecurity Compliance (CUI Protection)

The contract requires the implementation of NIST SP 800-171 controls to ensure the protection of Controlled Unclassified Information (CUI) across all systems and processes handling such data. Compliance with DFARS 252.204-7012 is mandatory, including the proper flow-down of these cybersecurity requirements to all subcontractors and vendors within the supply chain. The effort focuses on establishing, maintaining, and documenting security controls that align with federal standards to safeguard CUI from unauthorized access, disclosure, or modification, with full audit readiness expected. This is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER AE AND AF DIV, with performance centered at Tinker Air Force Base, Oklahoma, zip code 73145-8000. The solicitation, identified by the number SPE4A726T579K, is classified under NAICS code 541512 for computer systems design services. Responses must be submitted by July 24, 2026, and the contract is not subject to a specific set-aside designation. All participants are expected to demonstrate capability in meeting federal cybersecurity requirements and sustaining compliance throughout the contract lifecycle without reliance on external documentation or file-based references.