Cybersecurity Compliance and CUI Safeguarding

The contract mandates the implementation and thorough documentation of NIST SP 800-171 controls to protect Covered Defense Information and Controlled Unclassified Information across manufacturing and logistics operations, ensuring full compliance with Department of Defense cybersecurity requirements. The scope includes aligning internal systems, processes, and personnel practices with the 110 security controls outlined in NIST SP 800-171, with a focus on safeguarding sensitive data throughout the supply chain and maintaining continuous compliance readiness for DoD assessments. The work must be performed at the specified location in New Cumberland, Pennsylvania, and requires detailed evidence generation to demonstrate control effectiveness during potential audits or evaluations. All activities must be completed prior to the response deadline of August 10, 2026, under a subcontract structure governed by the NAICS code 541512, which pertains to computer systems design services. The effort is managed under the Nuclear Reactor Program of the Department of Defense, indicating the critical nature of the information being protected and the high bar for security posture. The successful contractor will be expected to deliver not only implemented safeguards but also formal documentation, policy updates, employee training records, and monitoring procedures that collectively prove adherence to federal standards and readiness for external DoD review.