Cybersecurity Compliance for CUI Protection

This contract requires adherence to DFARS 252.204-7012 and NIST SP 800-171 standards to ensure the protection of covered defense information and the proper reporting of cyber incidents. The work involves implementing and maintaining robust cybersecurity controls across all systems and processes that handle controlled unclassified information, with a focus on safeguarding sensitive data related to nuclear reactor operations. Compliance must be demonstrated through documented policies, personnel training, access controls, audit capabilities, and incident response procedures aligned with federal cybersecurity requirements. The contract is classified as a subcontract under NAICS code 541612, and performance is specifically required at Moody Air Force Base, Georgia, with a zip code of 31699-1700. The solicitation was posted on July 22, 2026, and responses are due by August 3, 2026. While no specific set-aside or organization type is designated, the effort falls under the Department of Defense’s Nuclear Reactor Program and is managed through the DLA DIBBS system. All parties must ensure their cybersecurity posture meets or exceeds NIST 800-171 controls and is fully prepared for audits or assessments related to CUI protection and cyber incident reporting.