Supply Chain Risk Management and Cybersecurity Compliance Support

The contract requires the development and implementation of a Supply Chain Risk Management Plan and a System Security Plan that fully align with NIST SP 800-171 standards to ensure the protection of Controlled Unclassified Information and to mitigate risks from counterfeit parts and cyber threats. This effort demands a comprehensive approach to identifying, assessing, and remediating vulnerabilities across the supply chain while enforcing rigorous cybersecurity controls within the information systems handling sensitive data. Compliance with NIST guidelines must be demonstrated through documented policies, procedures, and continuous monitoring mechanisms that safeguard against both internal and external cyber risks. The work is to be performed at a designated location in Coffeyville, Oklahoma, with a response deadline of July 30, 2026. This subcontract falls under NAICS code 541512, indicating a focus on computer systems design services, and is sponsored by the Department of Defense through the FA8119 Afsc Pzabc office. The contractor must demonstrate expertise in federal cybersecurity compliance, supply chain integrity, and the ability to execute a tailored plan that addresses the unique threats to CUI. All deliverables must be completed within the contractual timeline and meet stringent government security requirements without deviation.