Cybersecurity Compliance (NIST SP 800-171)

The contract requires the implementation and assessment of NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information (CUI) on non-federal systems, ensuring compliance with federal cybersecurity standards. This subcontract is linked to the Nuclear Reactor Program under the Department of Defense and is scoped for performance at a designated location in New Cumberland, Pennsylvania, with a zip code of 17070-5002. The work falls under NAICS code 541512, indicating it involves computer systems design and related services oriented toward cybersecurity implementation and evaluation. All efforts must align precisely with NIST SP 800-171 requirements, covering areas such as access control, audit, configuration management, identification and authentication, and incident response, among others, to establish a secure environment for handling CUI. The solicitation was posted on July 16, 2026, with a firm deadline for responses set for July 27, 2026, providing a limited window for interested subcontractors to submit proposals. There is no set-aside classification specified, meaning the opportunity is open to all eligible entities without preference based on size or ownership type. Participation requires demonstrated capability in executing NIST 800-171 compliance projects, with a focus on assessment methodology, documentation rigor, and remediation planning for gaps. The contract is managed through the DLA Dibbs system, and all submissions must be made via the provided online portal. Successful offerors will be expected to deliver a fully documented compliance posture that can be validated by the government, ensuring ongoing protection of sensitive information in non-federal networks.