Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST SP 800-171 controls to protect covered defense information housed on contractor systems, ensuring full alignment with Department of Defense cybersecurity standards. This includes establishing and maintaining robust security measures to prevent unauthorized access, disclosure, or compromise of sensitive data, as well as fulfilling all DOD-mandated reporting obligations for cybersecurity incidents and compliance assessments. The obligation extends to ongoing monitoring, documentation, and adaptation of security practices to meet evolving threat landscapes and regulatory expectations. This subcontract is tied to the NACIS code 541512 and is administered by the Nuclear Reactor Program under the Department of Defense, with performance obligations centered in Jacksonville, FL, zip code 32212-0103. The solicitation was posted on August 9, 2026, and responses are due by August 20, 2026. Contractors must demonstrate proven capability in executing NIST 800-171 requirements and be prepared to provide evidence of compliance, including System Security Plans and Plan of Action and Milestones, as part of the award and performance process.