Cybersecurity Compliance for CUI Handling

This contract requires the implementation and assessment of NIST SP 800-171 controls across systems that handle Controlled Unclassified Information related to the Nuclear Reactor Program under the Department of Defense. The work is scoped to ensure full compliance with federal cybersecurity standards for protecting CUI, targeting all technical, administrative, and physical safeguards mandated by the NIST framework. The subcontractor must conduct a thorough evaluation of existing systems, identify gaps in current controls, deploy necessary technical and procedural enhancements, and document compliance through formal assessments to meet federal requirements. The performance location is specified as New Cumberland, Pennsylvania, with a zip code of 17070-5002, and the work falls under NAICS code 541512 for computer systems design services. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026. The contract is structured as a subcontract, indicating it supports a larger prime contract or program under the Defense Logistics Agency’s DIBBS platform, and participation requires adherence to all applicable DoD cybersecurity protocols without a specific set-aside designation. All deliverables must demonstrate measurable compliance with NIST SP 800-171 to sustain authorization for handling CUI within the Nuclear Reactor Program’s operational environment.