Subcontractor NIST Assessment Verification and Flow-Down Compliance

The contract requires verification that all subcontractors maintain valid NIST SP 800-171 assessments completed within the past three years, ensuring compliance with cybersecurity requirements for handling controlled unclassified information. It mandates the proper flow-down of DFARS clauses 252.204-7012 and 252.204-7020 to all applicable subcontracts, with the exception of commercial off-the-shelf items, to enforce consistent security standards across the supply chain. Failure to demonstrate compliance with these clauses or to provide current assessment documentation will result in non-conformance. Performance is tied to Fort Stewart, Georgia, and the solicitation is issued under NAICS code 541611 for management consulting services, indicating that the work involves advisory or support functions requiring secure information handling. The contract is administered by the Department of Defense’s Aviation Supply Chain ESOC Buys office, and responses must be submitted by May 18, 2026. This solicitation does not include set-aside designations and is open to all qualified subcontractors capable of meeting the cybersecurity and compliance obligations outlined.