Cybersecurity Compliance (NIST SP 800-171)

The contract requires full compliance with NIST SP 800-171 to protect covered defense information within information systems, mandating thorough assessment, detailed documentation, and preparation for CMMC Level 2 certification. All cybersecurity controls must be implemented and maintained to meet federal standards for safeguarding sensitive data, with a focus on continuous monitoring and audit readiness. The effort spans the full lifecycle of compliance, including identifying gaps, remediating vulnerabilities, and ensuring all policies, procedures, and technical safeguards align with the latest NIST guidance. This is a small business set-aside subcontract under NAICS code 541512, issued by the Department of Defense through the ASC SUPPLIER OPER AE AND AF DIV, with performance centered at Tinker AFB, Oklahoma. The solicitation was posted on July 30, 2026, and responses are due by August 7, 2026. Contractors must demonstrate proven capability in handling classified and controlled unclassified information within defense environments and be prepared to undergo rigorous evaluation for CMMC Level 2 alignment. The project emphasizes accountability, documentation integrity, and operational security to meet DoD supply chain requirements.