Cybersecurity Compliance & NIST SP 800-171 Assessment Support

The contract requires comprehensive support to achieve and maintain compliance with NIST SP 800-171 for the protection of controlled unclassified information, specifically aligned with DFARS requirements. This includes conducting thorough system assessments to evaluate security controls, preparing and updating all necessary documentation to demonstrate compliance, and establishing robust procedures for cyber incident reporting as mandated by federal defense regulations. The efforts must ensure that all systems handling CUI meet the rigorous standards set forth by NIST SP 800-171 and the associated DFARS clauses governing contractor cybersecurity obligations. The work is to be performed at a designated location in Tracy, California, with a zip code of 95304-5000, and is classified as a subcontract under NAICS code 541512, reflecting its focus on computer systems design services. The solicitation was posted on July 30, 2026, with responses due by August 10, 2026, indicating a narrow window for proposal submission. The contracting agency is the Department of Defense through the Nuclear Reactor Program, underscoring the critical nature of the security requirements and the sensitivity of the information being protected. All activities must be conducted in strict accordance with federal cybersecurity protocols to ensure the integrity, confidentiality, and availability of controlled unclassified information.