Data Security and CUI Protection Services

The contract titled Data Security and CUI Protection Services requires the implementation of comprehensive cybersecurity safeguards to protect Controlled Unclassified Information in full alignment with NIST standards. The work is scoped to ensure the secure handling, storage, transmission, and disposal of CUI, with all systems and processes meeting required NIST SP 800-171 controls and applicable supplementary guidance. The subcontractor must demonstrate established policies, technical controls, personnel training protocols, and continuous monitoring capabilities to maintain compliance and mitigate risks associated with data breaches or unauthorized access. Performance is mandated to occur in Oak Ridge, Tennessee, with a submission deadline of July 31, 2026, and the solicitation was posted on July 24, 2026. The contracting entity is ORNL UT-Battelle LLC, a Department of Energy contractor, operating under NAICS code 541512 for computer systems design services. The nature of the work necessitates a contractor with proven expertise in federal cybersecurity frameworks, particularly those governing CUI within the DOE ecosystem. All solutions must be fully documentable, auditable, and capable of withstanding internal and external compliance reviews without exception.