Cybersecurity Compliance Support (NIST SP 800-171)

The contract requires the implementation of comprehensive cybersecurity safeguards for contractor information systems that handle covered defense information, in strict alignment with the requirements of DFARS 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171. The scope centers on ensuring that all systems processing, storing, or transmitting sensitive defense data meet the established security controls, including access management, audit logging, media protection, system and communication protection, and incident response procedures, all designed to prevent unauthorized access or exposure of controlled unclassified information. Compliance is mandatory, and the contractor must demonstrate operational readiness and ongoing adherence to these standards throughout the performance period. This subcontract is issued under the NAICS code 541512 for computer systems design services, with the performing agency identified as the Nuclear Reactor Program within the Department of Defense. The place of performance is specified as Bremerton, Washington, with a ZIP code of 98314-6001. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, leaving a limited window for submission. The work involves not only technical implementation but also documentation, validation, and possible third-party assessment to verify compliance with federal cybersecurity mandates. Contractors must be prepared to support audits and maintain evidence of control implementation across their systems to meet contractual and regulatory obligations.