Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information within contractor information systems. This includes developing a System Security Plan and a Plan of Action and Milestones to address any gaps in compliance, ensuring all cybersecurity requirements are met according to federal standards. The effort is focused on achieving full adherence to NIST guidelines to protect CUI and maintain compliance throughout the contract lifecycle. This is a subcontract under a Women-Owned Small Business Set-Aside, with the NAICS code 541512 indicating it pertains to computer systems design services. It is managed by the Nuclear Reactor Program under the Department of Defense, with performance located in San Diego, California, ZIP 92136-3581. The solicitation was posted on July 29, 2026, and responses are due by August 10, 2026. All work must be executed with strict attention to the specified security controls, documentation standards, and set-aside eligibility requirements.