Cybersecurity Compliance Support (NIST SP 800-171 / CMMC Level 2)

The contract seeks a subcontractor to provide advisory and managed services focused on implementing NIST Special Publication 800-171 controls to safeguard Covered Defense Information in alignment with DFARS 252.204-7012 requirements. The work includes conducting comprehensive self-assessments, remediating gaps in cybersecurity posture, and preparing the organization for CMMC Level 2 certification. Services must ensure continuous compliance throughout the contract lifecycle, with a strong emphasis on documentation, policy alignment, and operational readiness for federal defense environments. Performance is required at Tinker Air Force Base, with a focus on supporting Department of Defense contractor systems and supply chain security. The solicitation is classified as a subcontract under NAICS code 541512 for other computer-related services, and responses are due by August 3, 2026. The contracting activity is the ASC Supplier Operations OEM Division under the Department of Defense. While no set-aside status or point of contact is specified, the placement of performance at Tinker AFB indicates engagement with critical aerospace and defense assets. Subcontractors must be prepared to support rigorous security standards, deliver measurable compliance outcomes, and collaborate directly with DoD-affiliated entities to maintain the integrity of sensitive information systems.