Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Cybersecurity Compliance Services

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the implementation and maintenance of cybersecurity safeguards to protect federal contract information in accordance with NIST Special Publication 800-171, ensuring comprehensive compliance with federal standards for safeguarding controlled unclassified information. The work involves establishing, assessing, and continuously updating technical and procedural controls to meet the requirements of the standard, with a focus on minimizing vulnerabilities and ensuring ongoing resilience against cyber threats. This subcontract is tied to a Department of Energy contractor, specifically Oak Ridge-based ORNL UT-Battelle LLC, and performance is to be delivered at the 37830 zip code location in Oak Ridge. The solicitation is classified as a subcontract under NAICS code 541512, indicating it pertains to computer systems design services, and was posted on July 22, 2026, with a firm response deadline of July 30, 2026, at 8:00 PM. There is no set-aside designation specified, meaning the opportunity is open to all eligible entities without preference for small businesses or other categories. The contract demands a high level of technical expertise in federal cybersecurity frameworks and requires demonstrated experience in implementing NIST SP 800-171 controls within complex government contractor environments. Participation requires full adherence to federal requirements, with an emphasis on documentation, audit readiness, and continuous monitoring to ensure sustained compliance throughout the contract lifecycle.

General Info

Implement NIST SP 800-171 cybersecurity controls for DOE subcontract at Oak Ridge, compliance-focused, no set-aside.

Agency

Department Of Energy → Ornl Ut-Battelle Llc-Doe ContractorView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Oak Ridge, TN, 37830, USA

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Energy → Ornl Ut-Battelle Llc-Doe Contractor
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of Energy → Ornl Ut-Battelle Llc-Doe Contractor
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Implementation and maintenance of cybersecurity safeguards for federal contract information, including compliance with NIST SP 800-171.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
Azure Consulting IDIQThe Port of Seattle is preparing to engage a qualified cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to support the modernization and optimization of its Microsoft Azure and Hybrid cloud environment. The contractor will be tasked with validating and enhancing the existing Azure architecture, guiding the implementation of new services, and strengthening the organization’s security posture, system resiliency, and operational efficiency. Work will focus on ensuring all cloud designs and deployments align with the Port’s enterprise standards, operational demands, and long-term scalability goals, with an emphasis on best practices in cloud governance and architecture. The contract is classified under NAICS code 541512 for Computer Systems Design Services and is managed by the ICT Enterprise Infrastructure Services division under the Port of Seattle. Primary point of contact is Carol Hassard, with Jim Dawson serving as the Project Manager; inquiries can be directed via their provided email addresses and phone numbers. The solicitation is forecasted for release in July 2026, with no set-aside designation specified, and will be executed under a single contract vehicle to allow for flexible, task-order-based engagements as needs arise. The place of performance and administrative details are not yet defined, but work is expected to primarily support the Port’s internal infrastructure and cloud initiatives.
ICT Enterprise Infrastructure Services

POSTED

about 3 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
FIDS Software ReplacementThe Port of Seattle is forecasted to procure a new software solution for its Flight Information Display System, aiming to replace legacy systems with modern, reliable technology that enhances passenger information delivery at airport terminals. The solicitation, posted on July 24, 2026, falls under NAICS code 541512, indicating it is for custom computer programming services, and is managed by ICT Enterprise Infrastructure Services. The project will require a vendor to deliver a fully functional, scalable, and secure software platform capable of integrating with existing airport systems while supporting real-time flight updates, multilingual displays, accessibility features, and high availability under heavy operational loads. Performance is expected to occur at the Port of Seattle’s facilities, though specific location details are not provided. Primary point of contact for inquiries is Farlis Lewis, reachable via phone or email, with Krista Sadler listed as the Project Manager for operational coordination. While the contract has not yet been solicited and no set-aside provisions are indicated, interested vendors should prepare proposals that demonstrate technical expertise in aviation display systems, experience with airport infrastructure, and adherence to industry standards for reliability and uptime. The official solicitation details and submission instructions can be accessed through the provided UI link, and responses should be tailored to meet the Port’s operational requirements for seamless integration, minimal downtime during transition, and long-term support capabilities.
ICT Enterprise Infrastructure Services

POSTED

about 3 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance & Incident ReportingThis contract requires the implementation of NIST Special Publication 800-171 cybersecurity controls to protect covered defense information on nonfederal systems, ensuring alignment with federal standards for safeguarding sensitive data. The contractor must establish and maintain a comprehensive cybersecurity framework that meets all applicable requirements under NIST SP 800-171, including access control, audit and accountability, configuration management, and incident response measures. Compliance must be demonstrated through documented policies, procedures, and technical safeguards validated to the standards outlined in the publication. In addition to implementing the controls, the contractor is obligated to report any cyber incidents involving covered defense information within 72 hours of discovery, providing full detail of the nature, scope, and impact of the incident to the appropriate government entities. The contract is structured as a small business set-aside under SBA guidelines, specifically reserved for total small businesses, and falls under the NAICS code 541512 for computer systems design services. The solicitation is issued by the Department of Defense’s Strategic Acquisition Program Directorate, with a response deadline of July 28, 2026, and is intended for subcontracting purposes under a broader defense acquisition effort.
STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

about 17 hours ago

DEADLINE

in 4 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity and NIST SP 800-171 Compliance SupportThe contract requires full compliance with DFARS 252.204-7012 and NIST SP 800-171 to ensure the proper safeguarding of controlled unclassified information across all systems and processes involved in the performance of work. This obligation extends to implementing the full spectrum of security controls outlined in NIST SP 800-171, including access control, audit, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, system and communications protection, and system and information integrity. The subcontractor must demonstrate a formal, documented cybersecurity program aligned with these standards and be prepared to validate compliance through assessments or audits as required by the Department of Defense. The effort is classified as a subcontract under the NAICS code 541512 for computer systems design services and is managed by the Strategic Acquisition Program Directorate within the Department of Defense. The solicitation was posted on July 23, 2026, with a strict response deadline of July 28, 2026, indicating a limited window for qualified vendors to submit proposals. Performance location details are not specified, but the work likely involves supporting DoD systems handling CUI, requiring secure, controlled environments and potentially remote or onsite support. Compliance is non-negotiable and forms the core requirement for award and continued contract execution, with failure to meet these standards resulting in immediate disqualification or contract termination.
STRATEGIC ACQ PROGRAM DIRECTORATE

POSTED

about 17 hours ago

DEADLINE

in 4 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance (NIST SP 800-171)The contract requires the implementation and documentation of NIST SP 800-171 security controls to safeguard Controlled Unclassified Information (CUI) on contractor systems. This effort is critical to ensuring compliance with federal cybersecurity standards for handling sensitive but unclassified data, and all required controls must be fully activated, tested, and formally recorded to demonstrate adherence. The subcontract is under the Department of Defense, specifically managed by PUGET SOUND, with performance taking place in BREMERTON, WA, at the zip code 98314-6001. The solicitation is categorized under NAICS code 541512, which corresponds to Computer Systems Design and Related Services, indicating the technical nature of the work involved. Responses are due by July 28, 2026, and the opportunity was posted on July 23, 2026, providing a limited window for interested parties to submit proposals. The work is part of a broader initiative to enforce cybersecurity hygiene across the defense industrial base, and successful execution demands thorough understanding of NIST SP 800-171 requirements, including risk assessments, access controls, audit and accountability measures, system and communications protection, and continuous monitoring. Documentation must be precise and auditable, as non-compliance could jeopardize the contractor’s ability to handle CUI and may lead to termination or penalties. All activities must align with the Department of Defense’s expectations for protecting sensitive information on non-federal systems.
PUGET SOUND

POSTED

about 17 hours ago

DEADLINE

in 4 days
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance & NIST SP 800-171 ImplementationThe contract requires the implementation and ongoing maintenance of NIST SP 800-171 cybersecurity controls to safeguard controlled unclassified information within manufacturing and supply chain systems operated by the Department of Defense. This subcontract aims to ensure that all relevant technical, administrative, and physical security measures are properly configured and continuously monitored to meet federal standards for protecting sensitive data handled in operational environments. The work is tied to a NAICS code of 541512, indicating a focus on computer systems design and related services, with performance expected to align with DoD-specific requirements for securing information across industrial and logistical networks. The solicitation was posted on July 23, 2026, with a response deadline set for August 24, 2026, giving potential contractors approximately one month to submit proposals. The contract is managed under the ASC SUPPLIER OPER AE AND AF DIV, a division within the Department of Defense, and although no specific location is provided for performance, the nature of the work implies that compliance activities will be executed at facilities connected to the defense supply chain. The contractor must deliver a robust, auditable cybersecurity posture capable of withstanding inspection and maintaining continuous adherence to NIST 800-171 controls throughout the life of the agreement.
ASC SUPPLIER OPER AE AND AF DIV

POSTED

about 17 hours ago

DEADLINE

in about 1 month
View Details

More opportunities from Department Of Energy → Ornl Ut-Battelle Llc-Doe Contractor

Same awarding agency

NAICS: 333914
New
Federal
Turbovac with cables and air cooling unitOak Ridge National Laboratory is soliciting a Turbovac with cables and air cooling unit or a domestic alternative under solicitation number RFP485812, with responses due by July 27, 2026. The requirement is issued by ORNL UT-Battelle LLC, a DOE contractor, and performance must occur onsite at Oak Ridge, Tennessee, 37830. The Bill of Materials for the equipment, including all necessary cables and cooling components, is detailed in Attachment D, and all electrical components must be listed by a Nationally Recognized Testing Laboratory and properly labeled. The contract incorporates stringent data security mandates requiring compliance with NIST SP 800-171 for Controlled Unclassified Information and FIPS 140-2 encryption for Personally Identifiable Information, with all PII required to remain within the United States at all times. Security incident reporting must occur within one hour of discovery, and sellers must implement robust cyber protections including mandatory insurance coverage of $2 million each for commercial general liability, professional liability, and cyber liability, with carriers rated A-/VIII or better by A.M. Best. All personnel involved in delivery or onsite activities must be U.S. citizens, and any substitution of key personnel requires prior written approval. The seller is obligated to indemnify the contractor for claims arising from gross negligence or security breaches, and all subcontractors must flow down the same compliance and security requirements, with the prime contractor remaining fully liable. The contract strictly prohibits gratuities, lobbying contacts, and the use of child labor in end products, and bars contracting for certain telecommunications and video surveillance equipment as defined under DEAR clauses. Electrical equipment must be accompanied by testing reports, and no foreign acquisition waivers are permitted under FAR 52.225-1. Invoicing must be processed through the Ariba Network, and payment inquiries should be directed to ormlap@ornl.gov. The procurement does not specify pricing, contract value, or evaluation factors in the provided documentation, suggesting pricing and technical proposals are to be submitted by offerors in response to the RFP, with award potentially based on compliance, capability, and cost, though the exact methodology is not disclosed.
Measuring, Dispensing, and Other Pumping Equipment Manufacturing

POSTED

about 22 hours ago

DEADLINE

in 3 days
View Details
NAICS: 334112
New
Federal
Disk Storage Appliance additional Hard DrivesThe Enrichment Science and Engineering Division at Oak Ridge National Laboratory is seeking to procure additional hard drives for its Disk Storage Appliance under solicitation PR483393, issued on July 7, 2026, with responses due by July 16, 2026. The procurement is managed by UT-Battelle LLC, a Department of Energy contractor, and is classified under NAICS code 334112 for computer and peripheral equipment manufacturing. Detailed technical specifications and required components are outlined in Attachment A, the Bill of Materials, and Attachment B, the Technical Requirements for the additional hard drives, ensuring compatibility and performance standards are met for existing storage infrastructure. The place of performance is Oak Ridge, Tennessee, with all deliveries and installations expected to occur on-site at the Oak Ridge National Laboratory facility. Primary point of contact for the solicitation is Taylor Hunt, reachable at huntmt@ornl.gov or 865-341-3520, with Terri Cleveland as the secondary contact at clevelandtd@ornl.gov or 865-789-2935. The opportunity is not reserved for any specific set-aside classification and is open to all eligible vendors. Interested parties must submit proposals through the SAM.gov platform via the provided UI link before the deadline to be considered. All requirements must align with the technical and logistical specifications outlined in the attachments to ensure successful integration into the laboratory’s current storage systems.
Computer Storage Device Manufacturing

POSTED

about 22 hours ago

DEADLINE

in 7 days
View Details
NAICS: 611430
New
Federal
Technical Training and Knowledge TransferThe contract involves the delivery of onsite technical training to personnel at Oak Ridge National Laboratory for the Cavitar C400-B welding camera system, focusing on operation, routine maintenance, and troubleshooting procedures. The training is intended to ensure that ORNL staff gain full proficiency in using the system to support its intended industrial and research applications, with knowledge transfer being a central requirement. Performance of the work is specified to occur at the Oak Ridge facility with a zip code of 37830, and the contract is structured as a subcontract under the Department of Energy, administered by ORNL UT-Battelle LLC. The North American Industry Classification System code 611430 indicates the scope relates to other schools and instruction, aligning with the educational and technical transfer nature of the effort. The solicitation was posted on July 22, 2026, with a response deadline of July 29, 2026, indicating a tight turnaround for proposers to submit qualified bids. There is no set-aside designation listed, suggesting the opportunity is open to all eligible subcontractors without preferences for small businesses or other categories. The agreement does not include designated point of contact information, implying communication may be handled through standard contractual channels. The overarching aim is to enable ORNL to independently operate and sustain the Cavitar C400-B system without ongoing external vendor support, making the training not merely instructional but critical to operational continuity and mission readiness.
Professional and Management Development Training

POSTED

2 days ago

DEADLINE

in 5 days
View Details
NAICS: 238990
New
Federal
Onsite Installation and Integration SupportThe contract pertains to the onsite installation, calibration, and seamless integration of a welding camera system into existing operational workflows at Oak Ridge National Laboratory, located in Oak Ridge, Tennessee, with a zip code of 37830. This subcontract requires the contractor to deploy technical expertise to ensure the system functions correctly within the lab’s current infrastructure, with emphasis on precision calibration and minimal disruption to ongoing activities. The work must be performed on-site, indicating a need for direct access to laboratory environments and coordination with internal teams to align system performance with specific welding process requirements. The opportunity is posted under the NAICS code 238990, classifying it as other construction-related services, and is issued by UT-Battelle LLC, the Department of Energy’s contractor overseeing operations at the laboratory. The solicitation was published on July 22, 2026, with a deadline for responses set for July 29, 2026, at 8:00 PM. The contract type is explicitly a subcontract, suggesting the prime contractor or lab management is seeking specialized support to augment an existing project, and no set-aside provisions are specified, meaning all eligible vendors may compete regardless of size or status. There is no designated point of contact listed publicly, and full details are accessible via the provided SAM.gov link.
All Other Specialty Trade Contractors

POSTED

2 days ago

DEADLINE

in 5 days
View Details