Cybersecurity & Information Safeguarding (NIST SP 800-171)

The contract requires the implementation and assessment of NIST Special Publication 800-171 controls to protect covered defense information owned or handled by the contractor, ensuring alignment with federal cybersecurity standards for nonfederal systems. Compliance must be demonstrated through documented control implementation, ongoing monitoring, and formal reporting to verify adherence to the required security requirements. The scope includes establishing and maintaining incident response capabilities to detect, contain, report, and recover from cyber events affecting protected data, with an emphasis on timely and accurate communication of security incidents to appropriate authorities. Performance is expected to occur in San Diego, California, under the oversight of the Department of Defense’s Nuclear Reactor Program, with the subcontract targeting organizations capable of meeting stringent cybersecurity controls for defense-related information. The solicitation is open for responses until August 7, 2026, and falls under NAICS code 541512, indicating a focus on computer systems design and related services. The subcontractor must be prepared to demonstrate not only technical capability in deploying NIST 800-171 controls but also the ability to sustain compliance through continuous assessment and documentation, with all activities aligned to secure sensitive defense information in accordance with federal mandates.