Cybersecurity Compliance and CDI Safeguarding

The contract requires the implementation of NIST SP 800-171 security controls to safeguard Covered Defense Information within the scope of a subcontract under the Department of Defense. The primary objective is to ensure compliance with federal cybersecurity standards designed to protect sensitive data processed, stored, or transmitted by the contractor, with a focus on meeting Department of Defense assessment requirements. All activities must align with the NIST framework to maintain the integrity, confidentiality, and availability of CDI throughout the contract lifecycle. Performance is tied to the specified location in New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the work falls under the NAICS code 541512 for computer systems design services. The solicitation was posted on August 9, 2026, with a response deadline of August 20, 2026, and is issued through the DLA DIBBS system under the NUCLEAR REACTOR PROGRAM. Subcontractors must be prepared to demonstrate full adherence to the required controls and be capable of undergoing official DoD assessments to validate compliance, with no set-aside provisions indicated.