Cybersecurity Compliance for Covered Defense Information (CUI)

This contract involves the implementation and ongoing maintenance of cybersecurity controls based on the NIST SP 800-171 framework to safeguard Controlled Unclassified Information (CUI) on non-federal information systems. It is a subcontract opportunity issued by the Department of Defense's ASC Supplier OEM Division, with the place of performance specified as Tinker Air Force Base, Oklahoma. The contract falls under the NAICS code 541512, which relates to computer systems design services. The solicitation was posted on May 20, 2026, with a response deadline set for May 26, 2026. The effort emphasizes compliance with federal cybersecurity requirements to ensure the protection of sensitive defense-related information managed outside of federal networks. This work is critical for supporting defense contractors and suppliers in meeting regulatory standards and securing Covered Defense Information across their operational environments.