Cybersecurity Supply Chain Risk Management (C-SCRM) Compliance Support

The contract involves providing support for Cybersecurity Supply Chain Risk Management (C-SCRM) compliance, specifically focusing on the completion of necessary documentation, obtaining software producer attestations, and ensuring adherence to NIST SP800-161 standards. It also mandates compliance with export control regulations to guarantee that no prohibited equipment is utilized in the supply chain. This subcontract aims to reinforce cybersecurity measures by managing risks associated with suppliers and software producers, aligning with federal cybersecurity requirements. Issued by the U.S. Embassy in Lima under the Department of State, the opportunity falls under the NAICS code 541620, which pertains to environmental consulting services but is applicable here due to the cybersecurity risk management scope. The solicitation was posted on May 13, 2026, with a response deadline of June 1, 2026, at 4:00 PM. Although some contract details such as location specifics, point of contact, and set-aside status are not provided, the focus remains on subcontracting for specialized compliance support in the cybersecurity supply chain domain.