Subcontractor Cybersecurity Flow-Down Compliance

The contract requires the provision of cybersecurity compliance support and training to subcontractors to ensure adherence to FAR and DFARS flow-down requirements for safeguarding federal information. The focus is on enabling subcontractors to implement and maintain the necessary cybersecurity practices mandated by federal regulations, particularly those related to the protection of controlled unclassified information. This support includes guidance on documentation, system configurations, employee training, and audit readiness to align with NIST SP 800-171 and related security controls. The work is performed in Oak Ridge, Tennessee, under the auspices of ORNL UT-Battelle LLC, a Department of Energy contractor. The solicitation is classified under NAICS code 611430, indicating a focus on technical and professional training services. All responses must be submitted by July 30, 2026, and the contract is intended for subcontractors engaged in federal work who require assistance in meeting mandatory cybersecurity compliance obligations. The effort is critical to maintaining the integrity of the federal supply chain and ensuring that all tiers of contracting entities uphold the required security standards for handling sensitive government information.