Cybersecurity Compliance for Controlled Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security safeguards to protect covered defense information across all relevant systems and processes. Compliance with DFARS 252.204-7012 is mandatory, which includes timely reporting of any cyber incidents that may compromise the confidentiality, integrity, or availability of controlled unclassified information. The work is scoped as a subcontract under the Department of Defense, with performance focused at Tinker Air Force Base, Oklahoma, and the NAICS code 541512 indicates the nature of the work involves computer systems design and related services. All cybersecurity measures must align with federal standards to ensure the secure handling and transmission of sensitive defense data, and the contractor is expected to establish robust internal controls, monitoring, and response protocols to meet these obligations. The solicitation was posted on July 22, 2026, with a response deadline of August 3, 2026, and is open to qualified subcontractors seeking to support defense-related cybersecurity compliance efforts. There is no set-aside designation specified, meaning the opportunity is open to all eligible entities regardless of size or status. The place of performance is fixed at Tinker AFB, and all activities must be conducted in accordance with DoD cyber requirements without deviation. Contractors must have proven experience in applying NIST 800-171 controls and managing cyber incident reporting in a defense contracting environment, as failure to comply could result in contract termination, financial penalties, or loss of eligibility for future DoD work.