Controlled Unclassified Information (CUI) Safeguarding & Cybersecurity Compliance

The contract requires full implementation of NIST SP 800-171 security controls to protect Controlled Unclassified Information across all contractor systems, in alignment with DFARS requirements. This includes conducting System Security Plan and Risk Assessment (SPRS) evaluations to validate compliance, promptly reporting any cyber incidents involving CUI, and maintaining rigorous safeguarding measures to prevent unauthorized access, disclosure, or loss of sensitive data. All activities must be performed in accordance with federal cybersecurity standards and must be verifiable through documented processes and audit-ready records. The work is to be conducted under a subcontract arrangement with the Nuclear Reactor Program, part of the Department of Defense, and performance must occur at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The contract falls under NAICS code 541512, reflecting its focus on computer systems design services, and responses are due by May 13, 2026. Compliance is mandatory and non-negotiable, with failure to meet cybersecurity obligations potentially resulting in contract termination or penalties under federal procurement rules.