NIST SP 800-171 Compliance and Cybersecurity Support

The contract involves the implementation and ongoing maintenance of NIST Special Publication 800-171 security controls to safeguard Controlled Unclassified Information within systems handling sensitive data for the Department of Defense. This includes conducting comprehensive system assessments to verify compliance, establishing and validating incident response plans to address potential cybersecurity threats, and ensuring full adherence to DFARS clause 252.204-7012 through proper flowdown requirements across subcontractors and supply chain partners. The work is scoped to support a secure, auditable environment that meets federal cybersecurity standards for handling CUI. This is a small business set-aside subcontract under NAICS code 541512, with a response deadline of July 24, 2026, and performance expected to be centered in Bremerton, Washington, with a zip code of 98314-6001. The effort is sponsored by the Nuclear Reactor Program under the Department of Defense and is aimed at reinforcing the cybersecurity posture of critical defense infrastructure. Participation requires proven expertise in federal cybersecurity frameworks and the ability to demonstrate consistent, verifiable compliance with NIST 800-171 requirements across all contractual obligations.