Cybersecurity Compliance and NIST SP 800-171 Assessment

The contract requires the implementation and evaluation of NIST SP 800-171 cybersecurity controls to safeguard Controlled Unclassified Information within contractor systems, ensuring alignment with federal security standards. This includes a thorough assessment of existing security measures, gap remediation, and formal documentation to demonstrate compliance across all required control families. Contractors must achieve a validated Systems Security Plan and prepare for a scoring evaluation through the Supplier Performance Risk System to confirm readiness and adherence to mandated protocols. Additionally, the contract mandates immediate reporting of any cyber incidents affecting CUI, following established government procedures for disclosure and response. Performance is tied to the location in New Cumberland with a zip code of 17070-5002 and is issued as a subcontract under the NAICS code 541611 by the Department of Defense’s Nuclear Reactor Program. Responses are due by August 10, 2026, and the work must be executed in strict accordance with federal cybersecurity requirements to ensure continuous protection of sensitive data and regulatory compliance.