Cybersecurity Compliance for Covered Defense Information

This contract requires the implementation and documentation of NIST SP 800-171 security controls on contractor information systems that process, store, or transmit controlled unclassified information, specifically including technical data related to aircraft panels. The work must align with the cybersecurity requirements mandated for defense contractors handling covered defense information, ensuring that all systems meet federal standards for protecting sensitive but unclassified data. Full compliance includes conducting a thorough assessment of existing security measures, applying the required controls, documenting configuration and procedures, and maintaining audit-ready records to demonstrate adherence throughout the performance period. The contract is a small business set-aside under the SBA program, exclusively available to total small businesses as defined by the NAICS code 541512, which corresponds to computer systems design services. Performance is to be carried out at Robins Air Force Base, Georgia, with a response deadline of August 12, 2026, and the solicitation was posted on August 4, 2026. The sponsoring agency is the Department of Defense’s ASC Supplier Oper AE and AF Division, and all work must be executed under the terms of a subcontract arrangement. Successful offerors will be responsible for ensuring end-to-end cybersecurity compliance, with an emphasis on securing technical data critical to defense systems, and must be prepared for ongoing verification and potential audit by federal entities.