Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Attestation for Major Software Updates

Active

Federal

Response Deadline08/12/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the preparation and submission of formal attestation documents following major software version upgrades, to verify adherence to NIST secure software development practices. This obligation ensures that all updates to software systems meet federal security standards, with documentation serving as evidence of compliance throughout the development and deployment lifecycle. The work must be completed in accordance with established timelines and deliverables, with no flexibility in the required compliance framework. The contract is classified as a subcontract under NAICS code 541611 and is issued by the U.S. Embassy Pretoria under the Department of State. The place of performance is specified as Johannesburg, though no additional address details are provided. Responses are due by August 12, 2026, with the opportunity posted on July 31, 2026. No set-aside type is designated, and the solicitation number is not provided. The point of contact information is omitted, and the official listing can be accessed via the SAM.gov link provided.

General Info

Prepare and submit NIST-compliant attestation documents after software upgrades in Johannesburg by August 12, 2026.

Agency

Department Of State → US Embassy PretoriaView Agency

NAICS

541611 - Administrative Management and General Management Consulting ServicesView NAICS

Place of Performance

Johannesburg, ZA-GT, ZAF

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 31

subcontract

Response DeadlineAug 12

Submission deadline

Response Deadline

08/12/2026, 09:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of State → US Embassy Pretoria

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of State → US Embassy Pretoria

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Prepare and submit formal attestation documents after major software version upgrades, confirming compliance with NIST secure software development practices.

Similar Contracts

Same NAICS industry code

Title VI & Nondiscrimination Compliance ManagementThe contract requires comprehensive management of nondiscrimination compliance under Title VI of the Civil Rights Act, the Americans with Disabilities Act, and the Age Discrimination Act within public transit operations in Arizona. The scope includes developing and implementing policies and procedures to ensure equitable hiring practices and service delivery, conducting regular training programs for staff, and providing audit support to verify adherence to federal nondiscrimination requirements. All activities must be aligned with the NAICS code 541611, indicating a focus on management consulting services aimed at regulatory compliance. The subcontract is open for response until September 30, 2026, and is issued under the Public Transit agency in Arizona. It applies broadly across all transit services and employment functions within the state, necessitating a structured approach to identifying, mitigating, and correcting potential disparities in access and opportunity. Compliance efforts must be proactive and documentation-rich to support ongoing oversight and internal reviews. No specific set-aside provisions apply, and performance is expected to occur within Arizona without designated physical office requirements.

POSTED

about 20 hours ago

DEADLINE

in about 2 months

Small Business Participation Reporting & ComplianceThe contract requires comprehensive tracking, documentation, and reporting of subcontracting activities to ensure full compliance with the City of Phoenix Small Business Participation Plan and the DBE-N Program. This includes maintaining meticulous, audit-ready records that demonstrate adherence to state and local goals for small business and disadvantaged business enterprise participation across all qualifying projects under the Public Transit agency in Arizona. All subcontracting obligations must be monitored throughout the lifecycle of the work, with regular reporting to confirm that target participation rates are being met and that all necessary certifications and verifications are current and properly maintained. The work spans the period from the contract posting date in August 2026 through the response deadline in September 2026, with performance likely extending beyond this timeframe to cover ongoing project execution. The North American Industry Classification System code 541611 indicates the scope is related to management, scientific, and technical consulting services, suggesting the subcontracting activities involve professional services contracted by the transit agency. The contractor must ensure all processes are transparent, defensible, and fully aligned with Phoenix’s specific compliance frameworks, with an emphasis on accuracy, timeliness, and readiness for external audits or reviews by city officials or regulatory bodies.

POSTED

about 20 hours ago

DEADLINE

in about 2 months

Interpreter Scheduling and Dispatch CoordinationThe contract requires the management of end-to-end scheduling and dispatch of interpreters across multiple regions operated by the California Department of Corrections & Rehabilitation, ensuring interpreters are deployed promptly and in full compliance with established notification protocols. This subcontract focuses on coordinating language services to support communication needs within the state’s correctional facilities, with an emphasis on reliability, timeliness, and adherence to procedural requirements. The work spans various CDCR locations and demands robust logistical coordination to meet the dynamic demands of the correctional environment. The solicitation was posted on July 31, 2026, with a response deadline of August 21, 2026, and falls under NAICS code 541611 for management consulting services. Although no set-aside information is provided and specific geographic details for performance or agency address are unspecified, the contract is administered by the California Department of Corrections & Rehabilitation under the broader state agency structure. Interested parties must submit proposals through the CalEProcure portal before the deadline to be considered for this essential support function within the state’s correctional system.

California Department of Corrections & Rehabilitation

POSTED

about 20 hours ago

DEADLINE

Federal Education Fund Integrity CertificationThe Federal Education Fund Integrity Certification requires the contractor to conduct a thorough internal review and certification that all owners, officers, employees, and agents have not engaged in any fraud involving federal education funds or had their participation in Title IV programs revoked. This obligation applies across all levels of the organization and extends to any parties acting on its behalf, ensuring comprehensive compliance with federal integrity standards. The certification must be completed and submitted by the response deadline of August 14, 2026, and is tied to a subcontract under the NAICS code 541611, indicating the nature of the services provided relates to administrative management and general management consulting activities. The contract is issued by the University of Kansas and is part of its internal compliance framework to safeguard federal funding. While no specific set-aside provisions or geographic performance locations are detailed, the requirement is binding on the contractor as a condition of participation in any related federal education programs. Failure to properly certify or the discovery of false certifications may result in disqualification, termination of the subcontract, and potential legal consequences under federal oversight authorities. All parties involved must ensure accuracy and completeness in their disclosures to meet the legal and fiduciary responsibilities associated with handling federal education funds.

University Of Kansas

POSTED

about 20 hours ago

DEADLINE

Debarment and Eligibility Certification ServicesThe contractor is required to provide services focused on preparing and maintaining certifications to confirm that the contractor and its principals are not debarred, suspended, or under indictment by any federal or state authority. These certifications are essential to ensure compliance with eligibility requirements for participating in federally funded programs and contracts. The work involves ongoing monitoring of federal databases and internal compliance checks to verify the status of all relevant parties, with prompt updates and documentation submitted as needed to maintain continuous eligibility. This subcontract is issued by the University of Kansas under NAICS code 541611, which pertains to management consulting services, indicating that the certification process is part of broader compliance and risk management support. The solicitation was posted on July 31, 2026, with responses due by August 14, 2026. While no specific place of performance or point of contact is listed, the work is likely performed remotely or in alignment with the university’s internal compliance framework. The nature of the task demands accuracy, timeliness, and familiarity with federal procurement regulations to prevent disruptions to university operations or funding eligibility.

University Of Kansas

POSTED

about 20 hours ago

DEADLINE

Accessibility Compliance Documentation (VPAT & Remediation Roadmap)The contract seeks the development of Voluntary Product Accessibility Templates and remediation roadmaps to ensure electronic equipment and systems meet Section 508 and WCAG 2.1 AA accessibility standards. The work involves assessing current technologies for compliance gaps, documenting findings in standardized VPAT formats, and creating detailed, actionable plans to address accessibility deficiencies. The deliverables must reflect a thorough understanding of federal accessibility requirements and provide clear guidance for implementation by technical teams. This subcontract is issued by the University of Kansas with a response deadline of August 14, 2026, and is classified under NAICS code 541611 for administrative management and general management consulting services. The performance location is not specified, and there is no set-aside designation indicated. Interested parties must submit proposals through the university’s electronic bidding portal before the deadline, and the contract will support the institution’s commitment to digital accessibility across its technology infrastructure.

University Of Kansas

POSTED

about 20 hours ago

DEADLINE

Cybersecurity & Access Control for Video NetworkThe contract titled Cybersecurity & Access Control for Video Network requires the implementation of a robust security framework to protect video sharing among authorized government agencies, with a primary focus on role-based access control to ensure only authenticated personnel can view or manage sensitive footage. It mandates the use of strong encryption protocols to safeguard data both at rest and in transit, intrusion detection systems to identify and respond to unauthorized access attempts, and comprehensive audit logging to maintain a verifiable record of all user activities and system events. These components must be integrated seamlessly into an existing or newly developed video network infrastructure to meet stringent security and compliance standards. The contract is structured as a subcontract under the Texas Department of Transportation, with a posted date of July 31, 2026, and a response deadline of August 24, 2026. It falls under NAICS code 541611, which corresponds to administrative management and general management consulting services, indicating a need for specialized cybersecurity expertise rather than hardware procurement. The place of performance and point of contact details are unspecified, but the solicitation is accessible via the Texas SmartBuy portal, suggesting the work may be performed remotely or at Texas DOT facilities. The absence of a set-aside designation means all eligible contractors may compete, and successful bidders must deliver a fully functional, auditable, and secure video sharing platform aligned with state and federal cybersecurity best practices.

Texas Department of Transportation

POSTED

about 21 hours ago

DEADLINE

HUB Certification SupportThe contract titled HUB Certification Support is designed to assist contractors in verifying and submitting their Historically Underutilized Business certification through the Texas Comptroller’s office to qualify for HUB status. This subcontract aims to streamline the certification process, ensuring that eligible businesses can properly document and claim their status to participate in state and local contracting opportunities. The work requires expertise in navigating Texas HUB requirements, accurately compiling documentation, and aligning submissions with state guidelines to avoid delays or rejections. The solicitation was posted on July 31, 2026, with a response deadline of August 19, 2026, indicating a narrow timeframe for interested parties to submit proposals. The North American Industry Classification System code 541611 identifies the scope as management consulting services, reflecting the advisory and administrative nature of the support being sought. The contracting agency is the City of Denton operating under the state of Texas, and the performance location is within the same jurisdiction, though specific geographic details are not provided. The work is intended to enhance procurement equity by helping underutilized businesses gain access to city contracting programs through compliant and timely certification.

POSTED

about 21 hours ago

DEADLINE

Subcontractor Management and ReportingThe contract titled Subcontractor Management and Reporting requires the contractor to oversee the development and implementation of DBE, MBE, and WBE subcontracting plans to ensure compliance with diversity and inclusion goals. This includes securing pre-approval for all designated subcontractors prior to their engagement and maintaining accurate records of subcontractor awards and expenditures. Monthly reporting is mandatory, with detailed submissions tracking the utilization of minority and women-owned businesses throughout the project lifecycle to demonstrate adherence to equitable contracting standards. The contract is managed by the City of Denton under NAICS code 541611 and is open for response until August 19, 2026. While no specific set-aside type is designated, the emphasis remains on fostering participation from disadvantaged business enterprises. Performance is expected to align with the city’s broader equity initiatives, and all activities must be conducted under the oversight of the contracting authority, with strict adherence to reporting timelines and pre-approval protocols to maintain compliance and accountability.

POSTED

about 21 hours ago

DEADLINE

Small Business and Supplier Diversity Compliance (Administrative Support)The contract requires administrative support to assist a prime contractor with supplier diversity reporting and compliance, focusing specifically on obligations under Executive Order 11246 that may be triggered by the use of federal funds, even though no formal small business set-asides are in place. The work centers on ensuring accurate documentation, timely submissions, and adherence to federal reporting standards related to minority, women-owned, and other disadvantaged business enterprises, with an emphasis on maintaining compliance without the framework of reserved contracting opportunities. Performance of the contract will be based in Boston, Massachusetts, and the North American Industry Classification System code 541611 indicates the nature of the services involves management consulting, particularly in the administrative and compliance domain. The solicitation is classified as a subcontract and was posted on July 31, 2026, with a response deadline of August 19, 2026. The contracting authority is the Massachusetts agency under the 400000 - Procurement & Logistics designation, and while the exact point of contact details are not provided, the requirement is focused entirely on supporting the prime contractor’s federal compliance obligations through diligent administrative oversight and recordkeeping.

400000 - Procurement & Logistics

POSTED

about 22 hours ago

DEADLINE

Forced Labor and Certification Compliance ServicesThe contract pertains to services supporting the completion and ongoing maintenance of critical compliance certifications necessary for supply chain integrity, with a specific focus on the Foreign Country of Concern Attestation (PUR 1355) and the Forced Labor Compliance Certification. These certifications are essential to meet regulatory standards and ensure that all materials and products within the supply chain are free from forced labor and meet federal requirements regarding sourcing from foreign countries of concern. The work involves managing documentation, coordinating internal and external stakeholders, monitoring regulatory updates, and maintaining audit-ready records to sustain compliance over time. The services are delivered under a subcontract arrangement, aligned with NAICS code 541611 for management consulting services, and are required to support the Florida Fish and Wildlife Conservation Commission in fulfilling its federal compliance obligations. While the place of performance and point of contact details are not specified, the response deadline for submissions is set for September 10, 2026, and the opportunity was posted on July 31, 2026, indicating a window for interested vendors to propose their capabilities in compliance support.

Florida Fish and Wildlife Conservation Commission

POSTED

about 22 hours ago

DEADLINE

in about 1 month

Small Business and Minority Subcontractor Reporting ComplianceThe contract requires administrative support to ensure compliance with Florida Fish and Wildlife Conservation Commission’s subcontracting reporting obligations, specifically focusing on the preparation and timely submission of the Subcontractor Minority Status Report alongside each invoice. This task is critical to maintaining adherence to state-mandated reporting standards for small business and minority subcontractors, and the contractor must maintain accurate records and ensure all data submitted aligns with current regulatory requirements. The work is tied directly to the invoicing cycle, demanding consistent and meticulous attention to detail to avoid delays or noncompliance penalties. The solicitation, posted on July 31, 2026, with a response deadline of September 10, 2026, falls under NAICS code 541611 for management consulting services and is categorized as a subcontracting opportunity. While no specific set-aside designation is provided, the emphasis on minority subcontractor reporting indicates a focus on promoting equitable participation in state-funded projects. The work is performed in support of the Florida Fish and Wildlife Conservation Commission, with no designated physical place of performance specified, allowing for remote or virtual execution of administrative duties. The contractor must be prepared to interact with internal systems and reporting templates used by the agency to ensure seamless integration of subcontractor data into the invoicing process.

Florida Fish and Wildlife Conservation Commission

POSTED

about 22 hours ago

DEADLINE

in about 1 month

More opportunities from Department Of State → US Embassy Pretoria

Same awarding agency

Personnel Access Compliance (DOS PIV Policy)Contractors must ensure all personnel requiring access to U.S. Department of State facilities or systems in Johannesburg comply fully with the Department's Personal Identity Verification policy, encompassing rigorous identity proofing and thorough background screening procedures. This subcontract mandates strict adherence to DOS PIV standards to maintain security and integrity of government assets, with no exceptions for contractor staff regardless of role or duration of access. The opportunity is posted under NAICS code 561612, with a response deadline of August 12, 2026, and is tied to operations at the U.S. Embassy Pretoria, though performance will occur in Johannesburg. The contract is structured as a subcontract with no set-aside designation, and participation requires full alignment with federal identity verification protocols to enable authorized physical and system access.

Security Guards and Patrol Services

POSTED

DEADLINE

Cybersecurity Incident Response and ReportingThe contract requires the contractor to monitor for cybersecurity incidents specifically related to supply chain compromises and to report any confirmed events to the U.S. government within 12 hours of discovery. This obligation is critical to maintaining the integrity and security of systems connected to U.S. diplomatic operations. The work is to be performed in Johannesburg, with the U.S. Embassy Pretoria under the Department of State serving as the contracting agency, and falls under the NAICS code 541611 for computer systems design and related services. The solicitation is structured as a subcontract and was posted on July 31, 2026, with a mandatory response deadline of August 12, 2026. Timeliness and accuracy in incident reporting are non-negotiable priorities, and the contractor must possess the technical capability to detect, analyze, and escalate supply chain-based cyber threats swiftly and securely.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Vulnerability Exploitability Exchange (VEX) ReportingThe contract requires the monitoring of software components for newly identified vulnerabilities and the timely publication of Vulnerability Exploitability Exchange (VEX) documents within three days of detection to clearly communicate the exploitability status to the U.S. government. This obligation is critical for ensuring that federal stakeholders receive accurate, actionable intelligence on potential cybersecurity risks associated with software used in government operations. The performance location is specified as Johannesburg, and the work falls under the NAICS code 541690, indicating it is classified as other professional, scientific, and technical services, likely involving cybersecurity analysis or software assurance functions. This is a subcontract issued by the U.S. Embassy Pretoria under the Department of State, with a response deadline of August 12, 2026, and a posted date of July 31, 2026. The urgency of the requirement underscores the need for rapid response capabilities, as delays beyond the three-day window could compromise government security posture. The absence of a set-aside designation or specific point of contact suggests the solicitation is open to qualified subcontractors without preferential treatment, and performance is expected to meet strict federal cybersecurity reporting standards without room for deviation.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Software Bill of Materials (SBOM) Generation and ManagementThe contract requires the creation, ongoing maintenance, and timely delivery of standardized Software Bill of Materials (SBOMs) in SPDX and CycloneDX formats for all software components used within the scope of the agreement. This involves continuous updates to SBOMs whenever software patches are applied or version changes occur, ensuring accurate, up-to-date inventory tracking of third-party and open-source dependencies throughout the software lifecycle. The deliverables must meet industry-standard formats and be reliable enough to support security, compliance, and supply chain integrity requirements. The contract is structured as a subcontract under the US Embassy Pretoria, part of the Department of State, with performance located in Johannesburg. It was posted on July 31, 2026, with responses due by August 12, 2026, and falls under the NAICS code 541511 for custom computer programming services. There is no set-aside designation, and while no point of contact is listed, the work is tied to federal operations requiring strict adherence to software transparency and cybersecurity best practices.

Custom Computer Programming Services

POSTED

DEADLINE

Secure IT Equipment Supply (Commercial Off-the-Shelf Hardware)The contract pertains to the procurement and delivery of secure commercial off-the-shelf IT equipment that meets U.S. federal supply chain integrity standards, explicitly excluding any telecommunications hardware restricted under Section 889 of Public Law 115-232. The equipment must be sourced from vendors compliant with federal security and trustworthiness requirements to ensure the integrity of information systems used by U.S. government entities abroad. This is a subcontract opportunity issued by the U.S. Embassy Pretoria under the Department of State, with performance specifically designated for Johannesburg. All offerings must adhere to NAICS code 423430 for electronic appliance and equipment wholesalers, and suppliers must demonstrate full compliance with federal mandates regarding domestic sourcing and supply chain risk mitigation. The solicitation is open for responses until August 12, 2026, with proposals due by 9:00 PM Eastern Time. There is no set-aside designation for small businesses or other categories, indicating this opportunity is open to all eligible contractors. While no specific point of contact or detailed address information is provided, the contract is administered through the U.S. Department of State’s overseas operations and will require vendors to supply hardware that supports secure communications and data handling for diplomatic missions. Potential bidders must ensure their offerings are vetted and certified as free from components or manufacturers identified as national security risks under federal law.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Subcontractor and Supplier Network TransparencyThe contract requires the maintenance and full disclosure of subcontractor and supplier network data to ensure strict compliance with federal supply chain restrictions and mandatory flow-down requirements. This obligation applies to all tiers of the supply chain, demanding accurate, up-to-date, and transparent reporting of entities involved in delivering goods or services under the agreement. The goal is to safeguard against involvement with prohibited sources and to align with U.S. government policies on secure and trusted supply chains, particularly in sensitive federal operations. The contract is issued by the U.S. Embassy Pretoria under the Department of State, with the performance location set in Pretoria. It is classified under NAICS code 541611, indicating it relates to management consulting services. Interested parties must respond by the deadline of August 12, 2026, and are expected to demonstrate robust systems for tracking, documenting, and reporting subcontractor and supplier information in real time to meet federal compliance standards. There is no set-aside designation specified, and all eligible contractors may compete for this opportunity.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Government-Authorized System Testing SupportThe contract entitled Government-Authorized System Testing Support authorizes subcontractors to provide specialized testing services for IT systems on behalf of the US Embassy Pretoria under the Department of State. The work involves both non-destructive and destructive testing methodologies, including penetration testing and detailed component-level analysis, designed to evaluate the security posture and resilience of government IT infrastructure. The contract is classified under NAICS code 541350, which pertains to computer systems design and related services, indicating that the scope focuses on technical, security-oriented cyber assessments rather than general IT support. The solicitation, posted on July 31, 2026, has a firm response deadline of August 12, 2026, at 9:00 PM Eastern Time. Performance is to be conducted at the US Embassy in Pretoria, and the contract is structured as a subcontract, meaning the prime contractor will be responsible for engaging and managing any subcontractors performing the work. While no set-aside provisions or point of contact details are provided, the work is critical for maintaining the security integrity of US government systems abroad and requires strict adherence to authorized testing protocols, with no tolerance for unauthorized or uncontrolled access beyond the scope of government authorization.

Building Inspection Services

POSTED

DEADLINE

Compliance Attestation for Software UpdatesThe contract requires formal attestation of cybersecurity compliance following major software version updates, ensuring that all systems remain in alignment with federal security standards. This service is critical to maintaining the integrity and security of information systems used by the US Embassy in Pretoria, particularly after any significant software changes that could impact data protection or operational continuity. The attestation must be thorough, documented, and verified to confirm adherence to applicable federal requirements, with no room for assumption or informal validation. This is a subcontract opportunity under NAICS code 541611, indicating it falls under Management, Scientific, and Technical Consulting Services, with a response deadline of August 12, 2026. The work is performance-based at the US Embassy in Pretoria, and while no specific set-aside or organizational type is indicated, the requirement is tied directly to the Department of State’s need for consistent and auditable compliance. Entities interested must deliver a verifiable, authoritative confirmation that cybersecurity controls remain effective post-update, with no provision for delays or deviations from federal mandates.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Cybersecurity Incident ResponseThe contract titled Cybersecurity Incident Response requires the contractor to detect, report, and respond to cybersecurity incidents within twelve hours of discovery, ensuring seamless coordination with government stakeholders. This subcontract is issued by the US Embassy Pretoria under the Department of State and is tied to performance in Pretoria, South Africa. The NAICS code 541512 indicates it falls under Computer Systems Design and Related Services, pointing to a focus on technical cybersecurity capabilities and operational response. The solicitation was posted on July 31, 2026, with a firm response deadline of August 12, 2026, at 9:00 PM Eastern Time, leaving a narrow window for interested parties to submit proposals. There is no set-aside designation specified, meaning competition is open to all eligible entities regardless of size or status. The emphasis on rapid response underscores the critical nature of maintaining secure digital infrastructure for U.S. government operations in the region.

Computer Systems Design Services

POSTED

DEADLINE

Vulnerability Exploitability eXchange (VEX) ReportingThe contract requires the production and timely delivery of Vulnerability Exploitability eXchange (VEX) documents within three days of identifying a software vulnerability, specifically to enable government stakeholders to make informed, risk-based decisions. This obligation underscores the critical need for rapid and accurate reporting to support cybersecurity posture and incident response efforts. The deliverables must align with established VEX standards to ensure clarity, consistency, and utility for decision-makers within the Department of State. This subcontract is issued by the US Embassy Pretoria under the Department of State and is governed by NAICS code 541512, which pertains to custom computer programming services. The solicitation was posted on July 31, 2026, with a response deadline of August 12, 2026, and the performance location is designated as Pretoria. While specific point of contact details are not provided, the work is expected to be conducted in direct support of U.S. government operational needs in the region, emphasizing urgency, precision, and alignment with federal cybersecurity reporting protocols.

Computer Systems Design Services

POSTED

DEADLINE

Software Bill of Materials (SBOM) Development and ManagementThe contract requires the generation, maintenance, and timely submission of Software Bill of Materials (SBOMs) to ensure full traceability of software components and compliance with transparency and security standards. This work is critical for verifying the integrity of software used in U.S. diplomatic operations, particularly in support of cybersecurity and supply chain risk management obligations. The contractor must establish robust processes to document all third-party and open-source components, track version histories, and deliver updated SBOMs upon request to meet regulatory and operational demands. The contract is classified as a subcontract under NAICS code 541512, indicating it involves custom computer programming services. It is managed by the U.S. Embassy Pretoria under the Department of State, with performance required in Pretoria. The solicitation was posted on July 31, 2026, and responses are due by August 12, 2026. While no set-aside provisions or point of contact details are provided, the emphasis on SBOM delivery underscores the urgency of adhering to federal software transparency mandates, making compliance, accuracy, and responsiveness central to successful performance.

Computer Systems Design Services

POSTED

DEADLINE

Cybersecurity Supply Chain Risk Management (C-SCRM) ComplianceThe contract requires implementation of federal cybersecurity supply chain risk management practices with a focus on identifying and mitigating risks associated with covered telecommunications equipment and services, ensuring alignment with U.S. government standards for secure procurement. This subcontract is issued by the U.S. Embassy Pretoria under the Department of State and is categorized under NAICS code 541690, indicating it involves other scientific and technical consulting services related to cybersecurity. The performance location is designated as Pretoria, South Africa, suggesting the work will be executed in support of U.S. diplomatic operations abroad, requiring strict adherence to national and international cybersecurity protocols to safeguard sensitive communications infrastructure. The solicitation is set to close on August 12, 2026, with a deadline of 9:00 PM local time, and the opportunity was posted on July 31, 2026, indicating a brief but critical window for qualified contractors to respond. There is no specified set-aside type, meaning the contract is open to all eligible entities without preference based on business size or other classifications. Compliance with federal supply chain security requirements is mandatory, particularly concerning the use of equipment and services from vendors deemed restricted under U.S. law, and the successful bidder must demonstrate proven capability in assessing, managing, and continuously monitoring supply chain vulnerabilities while operating in a foreign environment under U.S. diplomatic oversight.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE