PII and Data Security Management

The contract titled PII and Data Security Management requires strict adherence to federal security standards for protecting personally identifiable information both in transit and at rest, mandating the use of FIPS 140-2 validated encryption protocols to ensure data integrity and confidentiality. Compliance with NIST SP 800-171 is a core requirement, demanding robust cybersecurity controls across systems handling sensitive data, including access management, audit logging, and system monitoring. Rapid incident reporting protocols must be in place to notify authorities immediately upon any suspected or actual breach, minimizing exposure and enabling swift mitigation. This subcontract, posted by Oak Ridge-based contractor UT-Battelle LLC under the U.S. Department of Energy, is classified under NAICS code 541690 for other scientific and technical consulting services. The performance location is specified as Oak Ridge with a ZIP code of 37830, indicating the primary operational area. Interested parties must submit responses by August 6, 2026, at 9:00 PM Eastern Time, with the solicitation having been made available on July 28, 2026. The contract does not specify a set-aside type, and no point of contact information is provided, requiring proposers to reference the official SAM.gov listing for further details.