Cybersecurity and Controlled Information Safeguarding (for IT-Enabled Tools)

The contract requires the implementation of comprehensive cybersecurity controls for tooling equipped with embedded software to ensure compliance with NIST Special Publication 800-171 and the safeguarding of controlled unclassified information. This effort is focused on securing systems that process, store, or transmit CUI within the context of information technology-enabled tools used by the Department of Energy’s contractor, Oak Ridge National Laboratory managed by UT-Battelle LLC. The scope demands adherence to federal cybersecurity standards through the deployment of technical, administrative, and physical safeguards tailored to the unique risks associated with embedded software environments. The solicitation is classified as a subcontract with a narrow response window closing on August 14, 2026, and was posted on August 10, 2026. Performance is specifically tied to the Oak Ridge, Tennessee location with a ZIP code of 37830, indicating that on-site operations or close proximity support may be required. The NAICS code 541512 identifies the work under computer systems design and related services, underscoring the technical nature of the deliverables. All efforts must align with federal requirements for protecting CUI and are expected to integrate seamlessly into the existing infrastructure of a Department of Energy national laboratory operation, with no set-aside designation specified for small or disadvantaged businesses.