NIST SP 800-171 Compliance & Cybersecurity Safeguarding

The contract requires the implementation and thorough documentation of NIST Special Publication 800-171 security controls to protect Controlled Unclassified Information (CUI) and ensure full compliance with Department of Defense cybersecurity requirements. The work is focused on establishing a robust cybersecurity framework that meets federal standards for safeguarding sensitive but unclassified data, with an emphasis on generating accurate and auditable compliance reports for DoD reporting obligations. This effort is critical for maintaining the integrity and confidentiality of information handled in support of nuclear reactor program activities. This is a small business set-aside subcontract under NAICS code 541512, reserved exclusively for total small businesses as defined by the SBA. Performance is required at the designated location in New Cumberland, Pennsylvania, with a response deadline of August 7, 2026. The solicitation is managed by the Department of Defense through the Nuclear Reactor Program, and contractors must be prepared to meet all technical, procedural, and reporting demands associated with NIST 800-171 implementation, including policy documentation, system assessments, and continual alignment with federal cybersecurity directives to maintain compliance throughout the contract lifecycle.