Cybersecurity Compliance for Covered Systems

The contract requires implementation of NIST Special Publication 800-171 security controls on all covered systems that handle controlled unclassified information, in alignment with DFARS clause requirements. The contractor must establish and maintain a compliant cybersecurity posture to ensure the protection of sensitive government data, with a clear focus on preparing for a third-party CMMC assessment to validate adherence to these standards. All systems and processes must be documented, configured, and operated in accordance with the specified framework to meet federal defense contracting obligations. The work is to be performed in Houston, Texas, under a subcontract arrangement with the Department of Defense through its ASC SUPPLIER OPER OEM DIVISION. The NAICS code 541512 indicates the nature of the work involves computer systems design and related services. The solicitation was posted on July 20, 2026, with responses due by July 28, 2026, requiring timely submission of compliance plans, implementation evidence, and readiness documentation for CMMC evaluation. Failure to meet these requirements will disqualify the contractor from fulfilling the contractual obligations and maintaining eligibility for future DoD work.