Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 controls to safeguard covered defense information throughout manufacturing processes and during data exchanges. This subcontract is scoped to ensure compliance with federal cybersecurity standards for handling sensitive defense data, specifically targeting organizations engaging in defense-related production or support activities. The performance location is tied to Tinker Air Force Base, Oklahoma, with the Department of Defense as the overseeing agency under the NAICS code 541512 for computer systems design services. All parties must adhere to the required security controls to protect information systems and data against unauthorized access, disclosure, or compromise. Responses to this solicitation are due by August 14, 2026, and the contract is posted on the DLA DIBBS platform. There is no specified set-aside status, and the type of organization eligible is not defined, allowing broad participation by qualified subcontractors. The focus is strictly on operational cybersecurity hygiene aligned with NIST guidelines, emphasizing control implementation over certification or audit processes. Compliance is mandatory for any entity handling covered defense information under this agreement, and performance must be fully executed at the designated location.