Controlled Unclassified Information (CUI) Security Compliance

The contract requires implementation of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information (CUI) within systems handling sensitive Department of Defense data. Compliance involves developing and maintaining a comprehensive System Security Plan that documents all security controls, procedures, and risk management practices aligned with NIST standards. The contractor must also prepare and submit DOD assessment reports to demonstrate adherence to the required security framework, ensuring ongoing accountability and validation of protective measures. This is a subcontract under the Nuclear Reactor Program, with performance located in New Cumberland, Pennsylvania, 17070-5002. The solicitation was posted on July 14, 2026, and responses are due by July 27, 2026. The NAICS code 541512 indicates this falls under Computer Systems Design Services, suggesting the effort involves technical implementation and integration of cybersecurity infrastructure. All activities must meet DOD expectations for CUI protection without reliance on classified systems, and the contractor is expected to operate under strict compliance protocols throughout the performance period.