Cybersecurity Compliance & CUI Protection

The contract requires full implementation and ongoing maintenance of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information and Covered Defense Information, ensuring compliance with Defense Federal Acquisition Regulation Supplement requirements. This includes conducting regular system assessments, maintaining comprehensive documentation of security posture, and establishing procedures for timely cyber incident reporting in alignment with applicable DFARS clauses. The scope is focused on sustaining a robust cybersecurity framework tailored to protect sensitive government data within the contractor’s systems and environments. The work is designated as a subcontract under the NAICS code 541512 for Computer Systems Design Services and is managed by the Nuclear Reactor Program within the Department of Defense. Performance is expected to occur at the FPO location with ZIP code 09523. Interested parties must submit responses by August 10, 2026, following the solicitation posted on July 29, 2026, through the DIBBS portal. The obligation to uphold NIST 800-171 controls is continuous and must be integrated into all operational and procedural workflows to ensure uninterrupted compliance and data protection.