Cybersecurity and CUI Safeguarding Services

The contract pertains to the implementation and ongoing maintenance of cybersecurity controls designed to safeguard Covered Defense Information and ensure full compliance with the Cybersecurity Maturity Model Certification Level 2 requirements. The work involves establishing robust security measures aligned with NIST SP 800-171 standards to protect Controlled Unclassified Information, with a focus on continuous monitoring, risk management, and compliance validation. This effort supports the Department of Defense's broader objective of securing sensitive data across its supply chain through standardized cybersecurity practices. The contract is structured as a small business subcontract under a Total Small Business Set-Aside, with the North American Industry Classification System code 541512 indicating it relates to computer systems design services. Performance is required to be conducted at a designated location in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 20, 2026, and responses must be submitted by July 31, 2026. The procuring activity is the NUCLEAR REACTOR PROGRAM under the Department of Defense, and all work must comply with federal acquisition regulations governing subcontracting and cybersecurity obligations.