Cybersecurity and Supply Chain Risk Management (SBOM & VEX)

The contract requires the generation and submission of a Software Bill of Materials for the SmartFill Gen3 ATG system, ensuring full transparency of all software components and dependencies. It mandates continuous monitoring for known vulnerabilities and immediate reporting of any discovered exploits to the U.S. government within 12 hours of identification. This obligation is part of a broader cybersecurity and supply chain risk management initiative under the Department of State, specifically managed by the U.S. Embassy in Manila. The work is structured as a subcontract with a deadline for response set for July 20, 2026, and falls under the NAICS code for custom computer programming services. Compliance is critical to maintaining the integrity and security of federally supported systems operating in a high-threat environment.