Cybersecurity and Covered Defense Information Safeguarding

The contract requires the implementation of NIST Special Publication 800-171 controls to protect covered defense information, with a strict obligation to report any cyber incidents promptly and accurately in accordance with DFARS 252.204-7012. Compliance with these security requirements is mandatory for safeguarding sensitive data handled under this subcontract, ensuring alignment with Department of Defense standards for information protection. The contractor must establish and maintain robust cybersecurity practices that meet or exceed the specified controls, including but not limited to access control, audit and accountability, incident response, and system and communications protection. The work is to be performed at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and must be completed under a subcontract structure tied to the NACIS code 541512, which corresponds to computer systems design services. Proposals must be submitted by August 3, 2026, with the solicitation posted on July 23, 2026, indicating a limited response window of approximately two weeks. Although no set-aside provisions are specified, the contracting agency is the Nuclear Reactor Program under the Department of Defense, underscoring the critical nature of the information to be protected and the necessity of rigorous compliance for national security purposes.