Cybersecurity Supply Chain Risk Management (C-SCRM) Compliance Services

The contract seeks specialized support to identify, document, and mitigate risks tied to covered telecommunications equipment or services as mandated by Section 889 of the National Defense Authorization Act and Cybersecurity Supply Chain Risk Management requirements. This subcontract is issued by the U.S. Department of State through the U.S. Embassy in Pretoria and requires the vendor to ensure full compliance with federal standards that prohibit the use of equipment or services from specified foreign entities. Performance of the work is expected to occur in Pretoria, and the solicitation is open for responses until August 20, 2026, with submissions due by 9:00 a.m. local time. The North American Industry Classification System code 541990 indicates this effort falls under other professional, scientific, and technical services, emphasizing the need for expert cybersecurity and supply chain risk management capabilities. The contract does not specify a set-aside designation or point of contact, and all proposals must align strictly with the C-SCRM framework to meet U.S. government security obligations.