Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and comprehensive documentation of NIST SP 800-171 cybersecurity controls to safeguard covered defense information within the designated environment. A critical component of this effort is the development of a complete System Security Plan that aligns with NIST standards and ensures compliance across all applicable security requirements. The work is structured as a subcontract under a Total Small Business Set-Aside, limited to small businesses as defined by the SBA, and is categorized under NAICS code 541512 for computer systems design services. Performance is specifically centered at Tinker Air Force Base with a zip code of 73145-8000, and the solicitation is managed by the Department of Defense through the Depot Oklahoma office. Responses must be submitted by July 27, 2026, with the solicitation originally posted on July 14, 2026. The effort is focused on achieving and maintaining strict cybersecurity compliance to protect sensitive defense data, requiring not only technical implementation of controls but also thorough documentation to demonstrate adherence. All work must be performed by a qualified small business capable of delivering a fully compliant System Security Plan and supporting cybersecurity documentation as mandated by NIST SP 800-171, with no flexibility for non-small business entities due to the set-aside status.