IT and Supply Chain Security Compliance

This contract requires the execution of IT supply chain risk assessments to ensure full compliance with NASA cybersecurity standards for Small Business Innovation Research contractors. The scope centers on evaluating and mitigating vulnerabilities within the supply chain that could compromise sensitive data or systems, with a strict emphasis on aligning with NASA’s specific cybersecurity frameworks and protocols. The work must be performed by a small business as this is a total small business set-aside under SBA guidelines, ensuring that only eligible small entities may bid. The opportunity, titled IT and Supply Chain Security Compliance, is solicited under NAICS code 541690 and issued by the NASA Shared Services Center on behalf of the National Aeronautics and Space Administration. Responses are due by May 21, 2026, at 9:00 PM Eastern Time, following a posting date of April 29, 2026. The contract is classified as a subcontract, indicating it will support a larger NASA program or initiative, and while no specific location is outlined, the performance is expected to be aligned with NASA’s operational and security requirements across its network. Compliance with all federal and agency cybersecurity mandates is mandatory and will be a primary evaluation criterion.