Cybersecurity Compliance and Reporting Services

The contract requires the implementation and ongoing monitoring of cybersecurity safeguards across contractor systems to ensure full compliance with NIST Special Publication 800-171, establishing a robust framework for protecting controlled unclassified information. Contractors must execute a comprehensive suite of security controls aligned with federal standards and maintain continuous visibility into system integrity, threat exposure, and access management. A critical obligation is the mandated reporting of any cyber incident to the Department of Defense within 72 hours of discovery, ensuring timely response and coordination to mitigate potential risks to national security interests. Performance is to be conducted at the specified location in New Cumberland, Pennsylvania, under the oversight of the Nuclear Reactor Program within the Department of Defense. The solicitation is structured as a subcontract with a narrow window for responses, closing just five days after posting, indicating urgency and tight timing for qualification. The NAICS code 541512 reflects that the work involves computer systems design and related services, with an emphasis on technical implementation, ongoing monitoring, and responsive reporting mechanisms. All activities must align strictly with DoD cybersecurity expectations, emphasizing not only compliance but also proactive defense and immediate incident escalation.