Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation and ongoing maintenance of NIST SP 800-171 security controls to protect covered defense information as mandated by DFARS 252.204-7012, ensuring that all systems handling such data meet federal cybersecurity requirements. This includes establishing robust access controls, encryption protocols, audit logging, and configuration management practices to safeguard sensitive information from unauthorized access, disclosure, or exfiltration. The contractor must also maintain comprehensive system documentation detailing the implemented controls and ensure timely reporting of any cyber incidents affecting covered defense information in accordance with federal guidelines. The work is to be performed at Robins Air Force Base, Georgia, under a subcontract classified under NAICS code 541512 for computer systems design services. The solicitation was posted on August 2, 2026, with proposals due by August 13, 2026. The contracting entity is the Nuclear Reactor Program within the Department of Defense, and compliance with all DFARS and NIST requirements is non-negotiable for contract fulfillment. Failure to meet these cybersecurity standards or to report incidents promptly may result in contract termination or penalties.