Cybersecurity Compliance (NIST SP 800-171)

The contract requires adherence to NIST SP 800-171 standards to protect covered defense information across all systems and processes involved in the performance of work. Compliance entails implementing the full array of security controls outlined in the framework, covering areas such as access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The contractor must document and validate implementation of these controls and submit a formal assessment score to the Supplier Performance Risk System to demonstrate compliance status. The contract is a subcontract under the Department of Defense, specifically managed by the ASC Commodities Division, with performance expected to occur at Tinker AFB, Oklahoma, 73145-8000. The solicitation was posted on May 11, 2026, and responses are due by May 14, 2026. The NAICS code 541611 indicates the work falls under computer systems design and related services. The contractor must ensure all cybersecurity practices align with federal mandates for handling sensitive defense information, with no deviations tolerated, and must maintain ongoing readiness for audit or verification by government representatives.