Cybersecurity and CUI Protection Services

The contract seeks subcontractor services to implement NIST SP 800-171 controls designed to safeguard Controlled Unclassified Information in alignment with CMMC Level 2 requirements. The work is focused on establishing and maintaining a robust cybersecurity posture to ensure compliance with federal standards for protecting sensitive data within the nuclear reactor program under the Department of Defense. The subcontractor will be responsible for assessing current systems, identifying gaps in security controls, and deploying technical and administrative measures that meet the rigorous criteria outlined in NIST SP 800-171 to ensure CMMC Level 2 readiness. Performance of the work is centered at BREMERTON, WA, with a 98314-6001 zip code designation, and the contract type is specifically classified as a subcontract under NAICS code 541512 for computer systems design services. The solicitation was posted on July 23, 2026, and responses are due by August 3, 2026, creating a narrow window for qualified parties to submit proposals. The contracting activity is managed by the Nuclear Reactor Program, indicating this effort supports critical national defense infrastructure that requires stringent protection of unclassified but sensitive information. Interested parties must ensure their capabilities align with the specific cybersecurity framework and demonstrate experience in executing similar compliance initiatives within defense contexts.