Cybersecurity for Covered Defense Information (NIST SP 800-171)

The contract requires the implementation and maintenance of NIST SP 800-171 security controls to safeguard covered defense information against unauthorized access, disclosure, or compromise. This effort is critical to ensuring compliance with federal cybersecurity standards for contractors handling sensitive defense data, and includes ongoing monitoring, assessment, and documentation of control effectiveness. The contractor must also establish and maintain procedures for timely cyber incident reporting in accordance with applicable regulations, ensuring rapid notification and coordinated response to any security breaches or anomalies affecting covered information. The work is classified as a subcontract under the NAICS code 541512 for Custom Computer Programming Services and is solicited by the Department of Defense under the Nuclear Reactor Program. Performance is required at the location in New Cumberland, Pennsylvania, with a ZIP code of 17070-5002. The solicitation was posted on August 4, 2026, and responses are due by August 17, 2026. The contracting vehicle is managed through the DIBBS system, and all parties involved must adhere to the regulatory and procedural requirements tied to handling covered defense information under the NIST framework.