Cybersecurity Compliance & NIST SP 800-171 Assessment Support

This contract supports the implementation and assessment of NIST SP 800-171 security controls, cyber incident reporting, and the safeguarding of Controlled Unclassified Information in alignment with DFARS clauses 252.204-7012 and 252.204-7008. The work focuses on ensuring compliance with federal cybersecurity requirements for entities handling CUI on behalf of the Department of Defense, specifically under the Nuclear Reactor Program. Tasks include evaluating current systems against NIST controls, identifying gaps, developing remediation plans, and establishing processes for timely cyber incident reporting as mandated by regulation. The contract is classified as a subcontract with a NAICS code of 541512, indicating it is related to computer systems design services. Performance is required at the location in Tracy, California, with a zip code of 95304-5000. The solicitation was posted on July 16, 2026, and responses are due by July 27, 2026. While no set-aside preferences are specified, the effort is critical for maintaining DOD supply chain cybersecurity standards and requires a thorough understanding of CUI handling, NIST frameworks, and DFARS compliance obligations. Successful offerors must demonstrate proven experience in delivering cybersecurity compliance services under similar federal contract conditions.