Cybersecurity and CMMC Compliance

The contract requires the implementation of NIST SP 800-171 security controls and ongoing maintenance of CMMC Level 2 certification to protect covered defense information as mandated by DFARS 252.204-7012. This subcontract is focused on ensuring robust cybersecurity infrastructure and compliance practices that align with Department of Defense requirements for handling sensitive unclassified information. The contractor must demonstrate the ability to establish, document, and sustain the necessary technical and administrative controls to meet CMMC Level 2 standards, which include access control, audit and accountability, configuration management, and incident response among other key areas. The solicitation was posted on July 5, 2026, with a response deadline of July 20, 2026, and falls under NAICS code 541512 for computer systems design services. The contracting activity is linked to the Nuclear Reactor Program within the Department of Defense, indicating the sensitive nature of the work and the criticality of information protection. While specific performance location details are not provided, compliance with federal cybersecurity standards is paramount, and successful execution will require continuous monitoring, documentation, and potential third-party assessments to maintain certification. No set-aside classification is specified, meaning all eligible contractors may compete for this opportunity.