Cybersecurity Compliance for Covered Defense Information

The contract requires the implementation of NIST SP 800-171 security controls and the development of a comprehensive System Security Plan to ensure the protection of covered defense information as mandated under DFARS 252.204-7012. This effort is focused on achieving full compliance with federal cybersecurity requirements for handling sensitive unclassified information within the defense supply chain, emphasizing the confidentiality, integrity, and availability of data. The contractor must document all security controls in place, demonstrate their operational effectiveness, and maintain ongoing compliance through continuous monitoring and reporting mechanisms. The work is to be performed at Robins AFB, Georgia, under a subcontract classified under NAICS code 541512 for computer systems design services. The solicitation was posted on July 16, 2026, with a response deadline of July 27, 2026, and is managed by the Department of Defense’s Nuclear Reactor Program. The contract demands stringent adherence to regulatory standards, and successful performance will require collaboration with government stakeholders to validate controls, update documentation, and maintain audit readiness. All activities must align with the Defense Federal Acquisition Regulation Supplement and support the broader objective of securing controlled unclassified information across defense infrastructure.