Subcontractor NIST Compliance Oversight & Management

The contract requires the management and verification of subcontractor compliance with the Basic NIST SP 800-171 assessment, ensuring that all subcontractors have completed a valid assessment within the past three years to maintain proper security posture and regulatory adherence. This obligation is critical to ensuring the flow-down of federal cybersecurity requirements throughout the supply chain, with documented evidence readily available for potential government audits or inspections. The responsible party must establish a systematic process to track, validate, and maintain records of each subcontractor’s compliance status, addressing any gaps or expirations promptly to prevent noncompliance. Performance is centered at Robins Air Force Base with the zip code 31098-1887, and the work falls under NAICS code 541611, indicating a focus on management, scientific, and technical consulting services. The solicitation was posted on May 12, 2026, with responses due by May 20, 2026, and is issued by the ASC Supplier Operations OEM Division within the Department of Defense. Although no set-aside classification or point of contact is specified, the contract emphasizes documentation readiness and oversight as non-negotiable requirements to support the broader government mission of securing controlled unclassified information across its contractor network.