Oklahoma City's Defense Identity
Oklahoma City's defense economy is Tinker Air Force Base. Not adjacent to it, not influenced by it — built around it. The Oklahoma City Air Logistics Complex (OC-ALC) at Tinker is one of three Air Force Air Logistics Complexes in the country and one of the largest single-site MRO operations in the world. They maintain bombers, tankers, and command and control aircraft that are among the most critical in the US military inventory.
Tinker is also one of the largest employers in Oklahoma — military and civilian combined, the installation employs tens of thousands of people. The private contractor community around Tinker is equally enormous. Boeing, Northrop Grumman, Raytheon, L3Harris — all have substantial Tinker operations. Behind the primes are hundreds of smaller Oklahoma companies providing parts, components, technical services, IT support, and specialized manufacturing.
The CMMC reality for OKC contractors is simple: if your work touches technical orders, aircraft specifications, maintenance data, or system configuration data for the aircraft at Tinker, you're handling CUI and need CMMC Level 2. The complexity of the depot environment means most Tinker supply chain contractors are in this position.
The depot itself — massive MRO operations for B-52, B-1, KC-135, E-3, E-6, and other aircraft. On-base contractors work directly with technical orders and maintenance data in the highest CUI-density environment in the state.
The industrial corridors adjacent to Tinker on the base's south and west sides host dense clusters of defense contractors — machine shops, avionics repair stations, parts distributors, and engineering services firms serving the depot supply chain.
Growing defense manufacturing presence in northwest OKC and surrounding communities. Aerospace component manufacturers, precision machining shops, and specialty material suppliers serving Tinker programs.
IT companies, engineering services firms, and professional services organizations supporting AFSC and the Tinker program office community. Defense IT contractors who manage systems containing CUI are themselves in CMMC scope.
You're maintaining B-52s — nuclear-capable aircraft that are the backbone of America's airborne deterrent. The technical orders that tell you how to maintain those aircraft are CUI. If you access them, CMMC Level 2 applies. This is not a gray area for Tinker contractors.
The free readiness check identifies your required level, gaps, and estimated cost. Tinker contractors: this is designed for depot MRO environments like yours.
Take the Free Readiness Check →Major Defense Employers at Tinker
- Oklahoma City Air Logistics Complex (OC-ALC) — The Tinker depot itself, executing depot-level maintenance for B-52 Stratofortress, B-1 Lancer, KC-135 Stratotanker, E-3 Sentry AWACS, and E-6 Mercury. Requires a dense contractor community for parts, services, and specialized maintenance.
- Boeing — B-52 sustainment and modification programs. Major Tinker presence with supply chain requirements flowing to Oklahoma suppliers.
- Northrop Grumman — Defense systems, electronics, and B-21 program support. Growing OKC presence.
- Raytheon / RTX — Missile systems, electronic warfare, and aircraft systems supporting Tinker programs.
- L3Harris Technologies — Avionics, communications, and electronic warfare systems with Tinker program ties.
- Pratt & Whitney — Engine maintenance and sustainment for Tinker aircraft programs.
- Smaller depot support specialists — Hundreds of Oklahoma companies providing components, materials, NDT services, avionics repair, and technical support to the depot supply chain.
The Tinker CUI Reality
Tinker's aircraft fleet makes the CUI situation particularly clear. The B-52 and E-6 are nuclear command and control assets. The KC-135 is the backbone of aerial refueling. The E-3 AWACS is the Air Force's primary airborne early warning and battle management aircraft. These aren't just any aircraft — they're critical national security assets.
The technical data for maintaining these aircraft is correspondingly sensitive. Technical orders, maintenance procedures, system specifications, and modification data for these platforms are CUI at minimum, and some data related to these programs is classified. If you're working on any of these aircraft — even on seemingly mundane components like hydraulic fittings or avionics connectors — the technical data you access to do that work is likely CUI.
What this means practically: virtually every contractor doing real technical work at Tinker — parts suppliers, component repair stations, engineering services firms, tool calibration shops that use technical orders — is handling CUI and needs CMMC Level 2. The rare exceptions are commercial-type services with no technical data involvement.
Your compliance package is built from your actual environment and verified by practitioners with Air Force depot MRO experience who know how to scope a Tinker supply chain correctly. Don't start with a generalist.
Take the Free Readiness Check →Oklahoma Resources for CMMC
Oklahoma's procurement assistance network with OKC advisors familiar with the Tinker contractor community. Provides free initial CMMC guidance, help understanding DFARS requirements, and connections to regional compliance resources. Start here before engaging paid consulting.
Oklahoma's Manufacturing Extension Partnership center. OMA offers CMMC gap assessments, cybersecurity training, and connections to vetted consultants who understand manufacturing environments. For small manufacturers in the Tinker supply chain, OMA's subsidized programs are a cost-effective entry point before engaging a private C3PAO.
The Greater OKC Chamber has defense industry programs and connections to the Tinker defense community. Their aerospace and defense industry group provides networking, compliance information, and peer connection for OKC defense contractors. A useful community resource alongside APEX and OMA.
What Oklahoma City Contractors Should Do Now
Tinker contractors tend to know they have a CMMC obligation — the Air Force has been communicating it clearly. The question is usually where to start. Here's the sequence that works:
Identify your technical order exposure. The key scoping question for Tinker contractors is: which systems do your employees use to access technical orders? Technical Order Management — the system through which depot contractors access TOs — is the primary CUI pathway in the depot environment. Everything that accesses TOMD or related systems is in scope.
Start with the Oklahoma Manufacturing Alliance if you're a manufacturer. OMA's subsidized gap assessment is the most cost-effective first step for small manufacturers. It tells you your gap count before you spend money on a private consultant.
Book your C3PAO slot early. Assessment slots are booking out nationally. If you want to be assessed before a prime puts a compliance deadline in your next contract, book early. You can remediate while you wait for your assessment date.
See the full CMMC cost guide for realistic cost estimates based on your company size and complexity.
Frequently Asked Questions
Tinker AFB is home to the Oklahoma City Air Logistics Complex — one of the largest aircraft MRO operations in the world. Tinker maintains B-52, B-1, KC-135, E-3, and E-6 aircraft. Technical orders for these aircraft are CUI. Every contractor who accesses technical orders or aircraft specifications at Tinker is handling CUI and needs CMMC Level 2.
Tinker's OC-ALC maintains the B-52 Stratofortress (nuclear bomber), B-1 Lancer (conventional bomber), KC-135 Stratotanker, E-3 Sentry AWACS, and E-6 Mercury. These are some of the most sensitive aircraft in the US inventory. The technical data for maintaining them is highly sensitive CUI. If you're in the supply chain for these platforms at Tinker, CMMC Level 2 is not optional.
Oklahoma Manufacturing Alliance is Oklahoma's MEP center — federally funded, helping small manufacturers with CMMC compliance. OMA offers gap assessments, cybersecurity training, and connections to vetted consultants. Their subsidized programs are a cost-effective starting point for Tinker supply chain manufacturers before engaging a private C3PAO.
Oklahoma APEX Accelerator is a procurement assistance network with OKC advisors familiar with the Tinker contractor community. They provide free initial CMMC guidance, help understanding DFARS clauses, and connections to regional consultants. A good first call before engaging paid consulting.
The CMMC framework is the same — NIST 800-171-based Level 2 for most suppliers. But the B-52 is nuclear-capable, and some B-52 program data may have requirements beyond standard CMMC. For most suppliers, Level 2 covers their obligations. A consultant with Tinker experience can help you understand if your specific work has requirements beyond standard Level 2.
Get Your C3PAO-Ready Documentation — Built for the Tinker AFB Depot Supply Chain
Take the free readiness check and get a complete compliance package built from your actual environment and verified by practitioners who understand the Tinker AFB depot supply chain.
Take the Free Readiness Check →Free · 2 minutes · No obligation
Or see pricing & packages →