Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST SP 800-171 cybersecurity controls to ensure compliance with DFARS requirements for handling Controlled Unclassified Information. This subcontract is focused on establishing, maintaining, and validating a robust cybersecurity posture to protect CUI within the specified performance location at Tinker AFB, Oklahoma. The work involves aligning systems, policies, and procedures with the 110 security controls outlined in NIST SP 800-171, conducting internal assessments, and preparing for potential third-party evaluations to confirm adherence to federal standards. The solicitation is open for responses until May 18, 2026, and falls under NAICS code 541512 for computer systems design services. The contracting activity is part of the ASC Commodities Division within the Department of Defense, indicating the work supports defense logistics and supply chain operations. Compliance is non-negotiable and must be fully operational by the time of performance, with the contractor expected to document all control implementations and maintain audit-ready records throughout the contract period. The successful party will be responsible for ongoing monitoring and reporting to sustain continuous compliance with federal cybersecurity mandates.