Cybersecurity & CUI Safeguarding (NIST SP 800-171 Compliance)

The contract requires the implementation and assessment of NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information on contractor systems supporting the Nuclear Reactor Program under the Department of Defense. This effort centers on ensuring full compliance with the NIST framework to protect CUI from unauthorized access, disclosure, or compromise, with a mandatory submission of the assessment results through the DoD’s official evaluation system. The work is scoped to occur at a primary location in San Diego, California, with the contractor expected to align all technical, procedural, and documentation requirements to meet federal cybersecurity standards for handling sensitive but unclassified data. This is a subcontract under NAICS code 541512, indicating it pertains to computer systems design and related services, and is not subject to any specific set-aside classification. The solicitation was posted on July 27, 2026, with responses due by August 7, 2026, creating a tight two-week window for proposal submission. Potential offerors must be prepared not only to deploy the required security controls but also to document and validate their implementation through a formal DoD assessment process, ensuring complete adherence to federal mandates. All activities must be conducted in accordance with the contract’s performance location and under the oversight of the Department of Defense’s Nuclear Reactor Program.