CUI Systems Security Implementation

The contract titled CUI Systems Security Implementation requires the establishment and ongoing maintenance of cybersecurity controls for systems handling Controlled Unclassified Information, fully compliant with NIST SP 800-171 and FIPS 140-2 encryption standards. The work is focused on ensuring that all data processing, storage, and transmission environments meet federal security requirements for protecting sensitive but unclassified information, with a strict emphasis on implementing robust access controls, audit logging, media protection, incident response, and cryptographic safeguards. The subcontract is issued by ORNL UT-Battelle LLC, a Department of Energy contractor, and performance must occur in Oak Ridge, Tennessee, with the zip code 37830. The solicitation was posted on July 20, 2026, and responses are due by July 24, 2026, at 8:00 PM Eastern Time. The North American Industry Classification System code 541512 identifies the work as computer systems design and related services, indicating that the contractor must possess both technical proficiency in cybersecurity engineering and a clear understanding of federal information security frameworks. The nature of the contract as a subcontract underscores the need for alignment with the prime contractor’s compliance posture and the Department of Energy’s security protocols. No set-aside designation is specified, meaning the opportunity is open to all eligible small and large businesses capable of meeting the stringent technical requirements for protecting CUI.