Cybersecurity Compliance Implementation and Reporting

The contract requires the implementation and documentation of cybersecurity controls as specified in NIST SP 800-171 Rev. 1 to ensure compliance with federal standards for protecting controlled unclassified information. This includes developing a comprehensive System Security Plan that outlines the structure, policies, and procedures for maintaining security controls within the designated environment. The contractor must conduct a thorough self-assessment of implemented controls, validate their effectiveness, and prepare all supporting documentation to demonstrate alignment with the NIST framework. All assessment results must be formally submitted to the Supplier Performance Risk System to satisfy federal compliance obligations. The work is to be performed at Tinker AFB with a zip code of 73145-8000 and falls under NAICS code 541618 for other scientific and technical consulting services. This is a subcontract under the Department of Defense, specifically managed by the ASC SUPPLIER OPER OEM DIVISION, and the response deadline is May 21, 2026. The effort is focused on achieving and maintaining cybersecurity posture for systems handling sensitive government data, with an emphasis on accurate documentation, consistent adherence to NIST guidelines, and timely reporting through the official DOD portal.