Cybersecurity Compliance for Covered Defense Information

The contract requires implementation of NIST Special Publication 800-171 controls to protect covered contractor information systems handling sensitive defense data, ensuring full alignment with Department of Defense cybersecurity compliance standards. This subcontract is focused on establishing, maintaining, and validating security measures that safeguard covered defense information, with the ultimate goal of enabling successful DoD assessments and demonstrating adherence to federal cybersecurity requirements. All activities must be performed at Tinker Air Force Base, Oklahoma, and completion is expected under strict timelines tied to the response deadline of July 24, 2026. The effort falls under NAICS code 541512, indicating a scope related to computer systems design services, and is issued by the ASC SUPPLIER OPER AE AND AF DIV under the Department of Defense. While no set-aside classification or point of contact details are provided, the subcontractor must be prepared to support ongoing compliance verification and potential audits by DoD entities. The work environment demands rigorous documentation, continuous monitoring of security controls, and integration with existing defense network infrastructures to meet the stringent protection standards for controlled unclassified information.