Cybersecurity Compliance (NIST SP 800-171) Assessment and Reporting

This contract requires the implementation and assessment of NIST SP 800-171 controls to safeguard covered defense information and ensure compliance with cyber incident reporting obligations under DFARS 252.204-7012. The work involves evaluating current cybersecurity practices against the NIST framework, identifying gaps, and executing necessary remediation measures to meet federal protection standards for sensitive defense data. Successful performance includes thorough documentation of control implementation, ongoing monitoring, and timely reporting of any cyber incidents as mandated by the regulation. The contract is issued as a subcontract under the Department of Defense’s Fluid Handling Division, with performance expected at Tinker Air Force Base, Oklahoma, in the zip code 73145-8000. It is classified under NAICS code 541612, indicating it pertains to management consulting services related to technical and operational cybersecurity compliance. Proposals must be submitted by August 10, 2026, following the solicitation posted on July 30, 2026. While no specific set-aside designation is indicated, responders must be prepared to demonstrate capability in military cybersecurity compliance, with attention to accurate reporting and audit readiness to support Defense Industrial Base requirements.