Controlled Unclassified Information (CUI) Safeguarding & Cybersecurity Compliance

This contract focuses on implementing robust cybersecurity measures in alignment with NIST SP 800-171 standards to protect Controlled Unclassified Information (CUI) within contractor systems. It requires the contractor to perform System Security Plan and Risk Assessment submissions through the Supplier Performance Risk System (SPRS), ensuring compliance with DFARS cybersecurity regulations. The contract also mandates timely reporting of cyber incidents to maintain transparency and mitigate potential threats. The work will be performed as a subcontract in support of the Department of Defense's Nuclear Reactor Program, specifically at the New Cumberland location. The solicitation was posted in early May 2026 with a response deadline shortly thereafter. The contract falls under the NAICS code 541512, covering computer systems design services. Key emphasis is placed on safeguarding sensitive information and maintaining cybersecurity compliance throughout the duration of the agreement.