Supply Chain Risk Management and Cybersecurity Compliance

The contract requires the implementation and ongoing maintenance of cybersecurity practices aligned with NIST SP 800-171 to ensure compliance with DFARS and NIST SP 800-161 requirements for supply chain risk management. This includes developing and sustaining a System Security Plan, maintaining a Plan of Action and Milestones, conducting timely incident reporting, and actively monitoring supply chain risks across all systems handling covered defense information. All activities must be performed in accordance with federal guidelines to safeguard controlled unclassified information and mitigate threats originating from third-party vendors and partners. This subcontract is a Total Small Business Set-Aside under SBA regulations, restricted to small business concerns, and falls under NAICS code 541512 for computer systems design services. Performance of the work is designated to occur in Coffeyville, Oklahoma, with a response deadline of August 31, 2026. The contracting activity is under the Department of Defense, specifically designated as FA8118 Afsc Pzabb, and the focus is on ensuring end-to-end cybersecurity resilience through structured compliance, continuous monitoring, and robust documentation practices mandated for defense contractors handling-sensitive data.