Cybersecurity Compliance (NIST SP 800-171 / DFARS)

The contract requires the implementation and ongoing maintenance of cybersecurity controls to safeguard covered defense information in accordance with DFARS 252.204-7012 and NIST SP 800-171 standards. This includes conducting a thorough system assessment to ensure compliance with all required security controls, maintaining comprehensive documentation of policies, procedures, and control implementations, and establishing protocols for timely incident reporting in the event of a breach or compromise. The effort is focused on achieving and sustaining a compliant security posture across all systems handling sensitive defense data, with strict adherence to federal cybersecurity mandates. The contract is structured as a subcontract under the Nuclear Reactor Program within the Department of Defense, with performance expected at New Cumberland, Pennsylvania, 17070-5002. It is classified under NAICS code 541512 for computer systems design services and is solicited with a response deadline of August 10, 2026. While no specific set-aside designation is indicated, potential offerors must be prepared to meet the rigorous technical and compliance requirements outlined in the referenced standards, including the ability to demonstrate proven experience in managing and validating NIST 800-171 controls within a defense contracting environment.