Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, July 22 at 2:00 PM EDT

Register Free →

Cybersecurity Supply Chain Risk Management (SBOM & VEX Compliance)

Active
Federal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the development and ongoing maintenance of Software Bill of Materials (SBOM) and the generation of Vulnerability Exploitability eXchange (VEX) reports for all software deliverables to ensure full compliance with NIST standards and Executive Order 14028. This work is essential for securing the software supply chain by providing transparent, accurate documentation of software components and their associated vulnerabilities, enabling timely risk assessment and mitigation. The deliverables must meet federal cybersecurity requirements and support traceability across the software lifecycle to protect critical systems and data. This subcontract is issued by the U.S. Embassy London under the Department of State, with performance located in London. The solicitation was posted on July 13, 2026, and responses are due by August 7, 2026. The North American Industry Classification System code 541512 indicates the scope falls under custom computer programming services, specifying that the work involves specialized technical expertise in cybersecurity and software inventory management. The requirement is focused on operationalizing SBOM and VEX capabilities to meet evolving federal mandates and enhance supply chain integrity for U.S. government software assets abroad.

General Info

Develop and maintain SBOM and VEX reports for U.S. Embassy London to meet NIST and EO 14028 cybersecurity requirements.

Agency

Department Of State → US Embassy LondonView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

London, GB-LND, GBR

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

Posted

subcontract

Response Deadline

Submission deadline

Response Deadline

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of State → US Embassy London
ContactsNo contacts available
OfficeN/A
Organization / Agency
Department Of State → US Embassy London
View Agency Profile
Office AddressN/A
ContactsNo contact information available

Full Description

Show more
Develop and maintain Software Bill of Materials (SBOM) and generate Vulnerability Exploitability eXchange (VEX) reports for software deliverables in compliance with NIST and Executive Order 14028.

Similar Contracts

Same NAICS industry code

NAICS: 541512
New
SLED
FIDS Software ReplacementThe Port of Seattle through ICT Enterprise Infrastructure Services is forecasting the replacement of its existing Flight Information Display System software to modernize air travel information services. The solicitation, posted on July 18, 2026, targets a software solution that will enhance the accuracy, reliability, and user experience of real-time flight data displayed across airport terminals. The North American Industry Classification System code 541512 indicates this effort is focused on custom computer programming services, suggesting the need for a tailored system rather than off-the-shelf software. The system must support seamless integration with existing airport infrastructure and meet evolving operational demands for passenger information delivery. Primary contact for the procurement is Farlis Lewis, with Krista Sadler serving as Project Manager, and inquiries may be directed via their provided phone numbers and email addresses. The contract does not specify a set-aside classification, meaning it is open to all eligible vendors without preference for small businesses or other designated categories. Though no specific location for performance is listed, the system is intended to serve the Port of Seattle’s aviation facilities, requiring any proposed solution to be deployable and supported at the airport environment. The official solicitation details can be accessed through the provided UI link for further technical and compliance requirements.
ICT Enterprise Infrastructure Services

POSTED

about 3 hours ago

DEADLINE

N/A
View Details
NAICS: 541512
New
SLED
RFP 26-013 BIPIN RMS and JMS/CMS Software ReplacementThe City of Kennewick is soliciting proposals for RFP 26-013 to replace the existing Public Safety Records and Jail Management System used by the Bi-County Police Information Network, which serves law enforcement agencies across Benton and Franklin Counties in Washington. The current system, implemented in April 2022 after transitioning from Intergraph I/Leads to Tyler Public Safety, is being replaced to better meet the operational needs of the consortium. Proposals must be submitted by September 10, 2026, at 3:00 p.m., and qualified contractors are expected to deliver a comprehensive, turnkey solution that includes system installation, data migration from multiple sources, configuration, implementation, ongoing service, and long-term maintenance tailored for a multijurisdictional environment. Interested parties must register for the pre-proposal meeting on July 27, 2026, via email to the point of contact, and all official updates, addenda, and Q&A will be posted exclusively through Public Purchase, which is the only authorized source for document access and communications. The City of Kennewick retains the authority to waive minor irregularities or reject any or all submissions, and bidders are advised to rely solely on Public Purchase for official documentation, as third-party portals cannot be guaranteed to receive updates. Technical inquiries and proposal submissions should be directed to Graham Modrell at the City of Kennewick, with contact information provided for email and phone. Online support through Public Purchase is available weekdays from 7:00 a.m. to 4:00 p.m. Mountain Time, and bidders are encouraged to verify access to materials directly through the platform to avoid delays or noncompliance. All proposals must fully address the requirements outlined in the solicitation to be considered.
City of Kennewick

POSTED

about 10 hours ago

DEADLINE

in about 2 months
View Details
NAICS: 541512
New
DIBBS
Cybersecurity Compliance & IT Support for Lab SystemsThe contract requires the implementation and maintenance of cybersecurity controls to safeguard laboratory information systems that handle Covered Defense Information, ensuring full compliance with the Defense Federal Acquisition Regulation Supplement clause 252.204-7012 and the National Institute of Standards and Technology Special Publication 800-171 standards. This includes establishing, monitoring, and continuously improving security measures to protect the confidentiality, integrity, and availability of sensitive defense-related data processed or stored within the lab systems. The scope encompasses both technical and procedural safeguards aligned with NIST 800-171’s 14 families of security requirements, including access control, audit and accountability, risk assessment, and incident response, with ongoing validation to maintain compliance. This subcontract is issued under the Defense Logistics Agency, part of the Department of Defense, and falls under the NAICS code 541512 for Computer Systems Design Services. The work is performed to support critical defense infrastructure, requiring strict adherence to federal cybersecurity mandates and continuous oversight to address evolving threats. While the place of performance and point of contact details are unspecified, the contract is active under the award number SPE60322D5003 and linked to delivery order SPE60322FA3D1, indicating its integration within a broader DoD procurement framework. All activities must be documented, tracked, and reported to satisfy federal compliance requirements and ensure the protection of sensitive information across the lab’s IT environment.
Defense Logistics Agency

POSTED

about 17 hours ago

DEADLINE

N/A
View Details

More opportunities from Department Of State → US Embassy London

Same awarding agency

NAICS: 541611
New
Federal
Cybersecurity Clause Flow-Down & Subcontractor Compliance ManagementThe contract mandates strict enforcement of cybersecurity and access control requirements across all levels of the supply chain, requiring prime contractors to ensure that every subcontractor adheres to the federal clauses FAR 52.204-9 and FAR 52.239-71. These clauses impose obligations related to safeguarding covered defense information and implementing cybersecurity practices, including reporting cyber incidents and securing contractor systems that process, store, or transmit sensitive data. Compliance is non-negotiable and must be actively managed through contractual flow-downs, audits, and ongoing monitoring to maintain the integrity and security of information throughout the entire subcontracting network. This subcontract opportunity, issued by the U.S. Embassy London under the Department of State, is classified under NAICS code 541611 for management consulting services and requires performance in London. The solicitation is open with a response deadline of August 7, 2026, and places full responsibility on the contracting entity to verify and document subcontractor adherence to all applicable cybersecurity standards. Failure to enforce these requirements at any tier of the supply chain may result in contract non-compliance, financial penalties, or termination. The emphasis is on proactive governance and continuous oversight to meet U.S. government standards for information security in international operational environments.
Administrative Management and General Management Consulting Services

POSTED

5 days ago

DEADLINE

in 20 days
View Details
NAICS: 23821
New
Federal
MV Breaker Preventive Maintenance ServicesThe U.S. Embassy London is seeking preventive maintenance services for a medium-voltage breaker system comprising ten Eaton MV-VCP-W circuit breakers located at 33 Nine Elms Lane, London, SW11 7US. All maintenance must strictly follow the latest manufacturer’s instructions and must be verified through secondary injection testing and controlled operational opening of each breaker to confirm proper functionality. The selected contractor is responsible for providing all personnel, transportation, tools, equipment, repair parts, and materials necessary to complete the work. The award will be made to the lowest-priced, technically acceptable offeror who is deemed responsible, with the government reserving the right to issue a firm fixed-price purchase order without negotiations. Payment will be made via electronic funds transfer only after full completion of all services, based strictly on the quantities and unit prices stipulated in the contract, with invoices required to be submitted post-completion. A mandatory site visit is scheduled for July 24th, 2026, at 10 a.m. BST, and interested parties must confirm attendance by emailing procurement_box3@state.gov no later than close of business on July 21st, 2026. All questions regarding the solicitation must also be submitted to the same email address by close of business on July 27th, 2026. Quotes are due by 5 p.m. BST on August 7th, 2026, and must be sent via email with the subject line “19UK5626Q0048 - MV Breaker”. The solicitation, identified as 19UK5626Q0048, falls under NAICS code 23821 and is issued by the Department of State through the U.S. Embassy London. Contract terms incorporate applicable FAR clauses, including those related to commercial item acquisition, cybersecurity supply chain risk management, personal identity verification, and workers’ compensation insurance, ensuring compliance with federal procurement standards for overseas operations.

POSTED

5 days ago

DEADLINE

in 20 days
View Details
NAICS: 33391
Federal
Supply of Chilled Water PumpThe U.S. Embassy London is seeking a chilled water pump with motor for its HVAC system under solicitation number 19UK5626Q0046, issued on July 7, 2026, with a response deadline of July 29, 2026, at 5:00 PM BST. The requirement specifically calls for a like-for-like replacement of the existing pump and motor, matching exact technical parameters including a flow rate of 122 L/S, total dynamic head of 333 KPa, pump pressure rating of at least 16 bar, 8-inch 125# ANSI suction flange, 6-inch 250# ANSI discharge flange, and a 415 Volt, 3-phase, 50 Hz motor rated for Variable Frequency Drive operation. The equipment must be built to international standards such as ISO, CE, UL, and ANSI, and must be capable of installation without any modification to existing piping or services; failure to meet this condition will result in full refund. Applicants must provide comprehensive documentation including pump and motor performance datasheets, dimensional drawings, nameplates of the existing units, and photographic evidence, along with a signed SF-18 form. A mandatory one-year warranty covering both pump and motor is required, and bidders must demonstrate the legitimacy of their business with a verifiable permanent address and telephone listing. The solicitation is not a small business set-aside and falls under NAICS code 33391. Award will go to the lowest priced, technically acceptable, responsible offeror, with the Government retaining the right to issue a contract without discussion. All contracts will be firm fixed price, with payment made via electronic funds transfer upon receipt of goods based on quoted unit prices and quantities, and invoices must be submitted only after delivery. Bidders must register in the System for Award Management and comply with required representations and certifications under FAR clauses including 52.204-8, 52.212-3, and 52.204-25, which mandates disclosures regarding covered telecommunications equipment. The contract incorporates clauses governing changes, government property, reporting nonconforming items, subcontracting, and payment terms under 52.232-33. Shipping is FOB destination to the U.S. Embassy at 33 Nine Elms Lane, London, SW11 7US, with an estimated gross weight of

POSTED

11 days ago

DEADLINE

in 11 days
View Details
NAICS: 561730
Federal
Monthly Landscaping Services - Hamilton, BermudaThe U.S. Embassy in London, acting on behalf of the U.S. Consulate General in Hamilton, Bermuda, is soliciting bids for comprehensive landscaping services under solicitation number 19UK5626Q0045, with a response deadline of August 10, 2026, at 17:00 Atlantic Daylight Time. The contract requires specialized landscaping services including lawn care, pruning, debris removal, watering to a depth of seven centimeters, fertilizing, liming, seasonal flower replacement, and pest and disease control, all performed at the Consulate’s property in Hamilton. Only companies with a registered business presence in Bermuda are eligible to submit proposals. The Government will award a firm-fixed-price contract to the lowest-priced technically acceptable offeror who is a responsible contractor, using a pass/fail evaluation process that assesses compliance with solicitation terms, technical acceptability based on experience and past performance, and responsibility under FAR 9.1, which includes financial capability, integrity, organizational competence, and qualification to perform. The contract will be structured as an indefinite-quantity, multiple-year agreement with a base period of 12 months and options to extend for a total duration not exceeding five years, including up to six months of additional performance time. All pricing must exclude Value Added Tax and must account for Defense Base Act insurance. The contract includes mandatory deliverables such as a Grounds Maintenance Plan, List of Personnel, Transition Plan, and monthly payment requests, all submitted to the Contracting Officer’s Representative, while insurance documentation is due to the Contracting Officer within ten days of award. Proposals must be submitted electronically to Procurement_Box2@state.gov and include the completed SF-1449 form with required blocks filled, evidence of DBA insurance, and the name of a Project Manager fluent in English. The offeror must maintain an active SAM registration and comply with all applicable federal regulations, Bermuda local laws, and environmental standards for safe handling and disposal of hazardous materials. The Government reserves the right to inspect, test, and reject nonconforming services and may initiate termination or corrective action for repeated customer complaints, with a performance standard limiting complaints to no more than one per month. Site visits are planned, and all work must adhere to horticultural best practices.
Landscaping Services

POSTED

19 days ago

DEADLINE

in 23 days
View Details