Cybersecurity Compliance (NIST SP 800-171)

The contract requires full implementation of NIST Special Publication 800-171 security controls to safeguard covered defense information within the contractor’s systems. Compliance must be verified through a systematic SPRS assessment, ensuring all required controls are properly documented and enforced. Timely reporting of any cyber incidents involving covered defense information is mandatory, with strict adherence to established protocols for notification and response to maintain the integrity and confidentiality of sensitive data. The work is performance-based and must be completed in alignment with Department of Defense cybersecurity expectations. This subcontract is associated with the NAICS code 541512 and is tied to Tinker Air Force Base, Oklahoma, as the place of performance. The solicitation was posted on June 25, 2026, with a response deadline of July 6, 2026, indicating a narrow window for submission. The contracting activity falls under the Fluid Handling Division of the Department of Defense, and while no set-aside type is specified, all proposers must demonstrate capability to meet the NIST 800-171 requirements and support incident reporting obligations in a secure, compliant manner.