Cybersecurity Supply Chain Risk Management (C-SCRM) Compliance and Auditing

This contract involves providing third-party assessments, audits, and compliance services focused on ensuring adherence to Cybersecurity Supply Chain Risk Management (C-SCRM) requirements as outlined under NDAA Section 889. The services include verifying and certifying supply chain integrity through recognized standards such as ISO 27001 and SOC II, ensuring that suppliers and contractors meet stringent cybersecurity and risk management protocols. The objective is to maintain the security and reliability of the supply chain, particularly for the Department of State’s operations. The contract is a subcontract type under NAICS code 541618, which covers technical consulting services, and it is managed by the US Embassy in Riga, Latvia. The place of performance is Riga, with postal code LV-1510. This engagement supports the embassy’s mandate to comply with federal cybersecurity regulations aimed at reducing supply chain vulnerabilities, particularly in light of evolving national security concerns associated with information technology and communications equipment. The contract was posted on April 29, 2026, and focuses on delivering compliance verification aligned with federal mandates for supply chain risk management.