NIST SP 800-171 Cybersecurity Compliance for Covered Defense Information

The contract requires implementation and maintenance of NIST SP 800-171 security controls to protect controlled unclassified information (CUI) on systems supporting the Nuclear Reactor Program within the Department of Defense. Key deliverables include the development and ongoing upkeep of a System Security Plan and Plan of Action and Milestones to document compliance status, risk mitigation efforts, and remediation timelines. Contractors must establish robust cyber incident reporting processes to ensure timely notification and response to any security breaches or anomalies involving CUI. Performance is mandated at Robins AFB, Georgia, with a compliance focus on safeguarding defense-related information under federal cybersecurity standards. The contract is classified as a subcontract with a NAICS code of 541512, indicating it falls under custom computer programming services. The solicitation was posted on July 30, 2026, and responses are due by August 10, 2026, with all work tied to meeting the stringent requirements of NIST SP 800-171 as applied to defense infrastructure handling sensitive, non-classified data.