CUI & Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of cybersecurity controls to safeguard Controlled Unclassified Information in alignment with DFARS and NIST SP 800-171 standards. The work involves establishing, validating, and maintaining a robust cybersecurity framework that meets federal requirements for protecting sensitive data within the defense supply chain. Compliance with all specified NIST controls is mandatory, and the contractor must demonstrate adherence through documentation, audits, and operational readiness assessments. This subcontract is issued under the NAICS code 541512 for computer systems design services and is managed by the Nuclear Reactor Program under the Department of Defense. Performance must occur at the designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. Proposals are due by July 24, 2026, and the opportunity was posted on July 13, 2026. The entity must possess the technical capability to deploy, monitor, and sustain cybersecurity controls in an environment handling CUI and be prepared to provide evidence of compliance upon request.