Cybersecurity Compliance for Controlled Unclassified Information (CUI)

The contract requires implementation and documentation of cybersecurity safeguards outlined in NIST SP 800-171 to protect Controlled Unclassified Information (CUI) in compliance with DFARS clauses. The work involves aligning systems, processes, and administrative controls with the specific requirements of the NIST framework to ensure secure handling, storage, and transmission of covered defense information. All necessary policies, procedures, and evidence of compliance must be thoroughly documented and maintained for audit readiness. This subcontract is issued under the NAICS code 541512, indicating it pertains to custom computer programming services, and performance is designated for New Cumberland, Pennsylvania with a ZIP code of 17070-5002. The solicitation was posted on July 30, 2026, with a firm response deadline of August 10, 2026. The contracting entity is the Nuclear Reactor Program under the Department of Defense, and successful bidders must demonstrate capability to meet federal cybersecurity standards for CUI protection within the defined timeline and location.