Controlled Unclassified Information (CUI) Cybersecurity Services

The contract seeks cybersecurity services dedicated to safeguarding Controlled Unclassified Information (CUI) both in transit and at rest, requiring compliance with FIPS 140-2 encryption standards and strict data residency controls to ensure information remains within approved geographic and technical boundaries. Service providers must implement robust technical and operational measures to prevent unauthorized access, disclosure, or manipulation of CUI, with a strong emphasis on end-to-end protection throughout the data lifecycle. Incident reporting protocols are mandatory, requiring immediate notification and detailed documentation of any security breach, anomaly, or potential compromise to ensure swift response and regulatory compliance. This subcontract is issued by Oak Ridge National Laboratory under the Department of Energy, with performance centered in Oak Ridge, Tennessee, zip code 37830. The solicitation falls under NAICS code 541511 for computer systems design services, and responses are due by July 30, 2026, at 8:00 PM Eastern Time. While no set-aside criteria or point of contact details are provided, bidders must be prepared to meet federal cybersecurity requirements for CUI protection without leveraging specific small business or socioeconomic preferences. All offered solutions must demonstrate alignment with the latest NIST guidelines and be capable of continuous monitoring, audit readiness, and integration with existing DOE security frameworks.