Cybersecurity Compliance and CUI Safeguarding

The contract requires the implementation and ongoing maintenance of cybersecurity controls to ensure compliance with CMMC Level 2 and NIST SP 800-171 standards for the protection of Controlled Unclassified Information (CUI) on defense systems. This engagement is specifically focused on safeguarding sensitive data within nuclear reactor program operations, demanding a robust and auditable security posture that aligns with federal cybersecurity mandates. The successful contractor must demonstrate capabilities in configuring, monitoring, and updating systems to meet these rigorous requirements, with continuous adherence to control frameworks covering access control, audit, incident response, and data encryption among others. This is a small business set-aside subcontract under the SBA’s Total Small Business Set-Aside category, designated under NAICS code 541512 for computer systems design services. The opportunity was posted on August 2, 2026, with responses due by August 13, 2026. Performance is located in Tracy, California, with a zip code of 95304-5000. The contract is issued by the Department of Defense under the Nuclear Reactor Program, indicating its critical nature within national defense infrastructure. All activities must be executed in full alignment with federal acquisition regulations and the specified security standards, with emphasis on sustainable compliance and protection of CUI throughout the contract lifecycle.