Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard Controlled Unclassified Information in accordance with NIST Special Publication 800-171 and the Defense Federal Acquisition Regulation Supplement requirements. This subcontract is focused on ensuring compliance with federal standards designed to protect sensitive but unclassified data handled by defense contractors, with specific emphasis on technical measures, access controls, audit capabilities, and system integrity. Performance of all required cybersecurity activities must be conducted at the designated place of performance in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The solicitation falls under NAICS code 541512, which classifies it as computer systems design and related services, indicating the work involves technical implementation and configuration of cybersecurity infrastructure. The response deadline is August 10, 2026, and the posting date is July 30, 2026, allowing approximately two weeks for proposers to submit their offers. Although the contracting agency is identified as the Nuclear Reactor Program under the Department of Defense, no specific point of contact or set-aside status is provided, suggesting the opportunity is open to all eligible subcontractors without preference or limitation based on business size or category. All proposals must demonstrate clear understanding and capability to meet the full scope of NIST SP 800-171 controls, with continuous monitoring and documentation required to maintain compliance throughout the contract lifecycle.