Cybersecurity Compliance and CUI Handling

The contract requires implementation and maintenance of cybersecurity controls to protect covered defense information in accordance with DFARS 252.204-7012 and NIST SP 800-171 standards. This includes establishing and sustaining appropriate safeguards for controlled unclassified information, ensuring compliance with all mandated security requirements, and promptly reporting any cyber incidents that may compromise the integrity, confidentiality, or availability of sensitive data. The contractor must handle, store, transmit, and dispose of controlled unclassified information in strict alignment with federal guidelines to prevent unauthorized access or disclosure. Performance of this subcontract is located in New Cumberland, Pennsylvania, with a response deadline of August 13, 2026, and the work falls under NAICS code 541512 for computer systems design services. The contracting entity is part of the Department of Defense’s Nuclear Reactor Program, indicating the sensitivity and critical nature of the information involved. The subcontractor is expected to demonstrate robust cybersecurity capabilities and compliance readiness, as failure to meet these requirements may result in contractual penalties or termination. All activities must be conducted with a focus on continuous monitoring, incident response preparedness, and adherence to evolving federal cybersecurity directives.