Cybersecurity and Supply Chain Risk Management (C-SCRM) Compliance Support

The contract seeks advisory services to ensure full compliance with Cybersecurity and Supply Chain Risk Management requirements, particularly focusing on the completion of the C-SCRM Questionnaire and the execution of supply chain audits to identify and mitigate risks. A critical component involves the prohibition of engaging with specific vendors such as Huawei and ZTE, requiring diligent vendor screening and ongoing monitoring to prevent unauthorized sourcing. Services must be delivered to support the Department of State’s obligations, despite the place of performance being located in Beijing, which adds complexity to execution and oversight due to geopolitical and regulatory constraints. This is a subcontract under the NAICS code 541611 for management consulting services, posted by Acquisitions - Rpso Frankfurt with a response deadline of August 13, 2026. The work is expected to involve close coordination with U.S. government standards and supply chain integrity protocols, requiring expertise in international risk assessment, regulatory alignment, and secure vendor management practices. Although the location of performance poses logistical and compliance challenges, the contractor must ensure all deliverables meet U.S. federal security mandates without exception, emphasizing strict adherence to prohibited vendor lists and audit documentation integrity.