Software Attestation and Compliance Certification

The contract requires the provision of formal software attestations following major system updates, ensuring adherence to secure development practices as defined by the NIST Secure Software Development Framework and applicable federal cybersecurity guidelines. These attestations must be comprehensive, documented, and submitted to verify that all software modifications have been developed, tested, and deployed using validated secure engineering controls, threat modeling, and input validation procedures aligned with federal standards. The work is scoped to support the U.S. Embassy in Podgorica under the Department of State and must be performed primarily in Podgorica, Montenegro, with a zip code of 81000. This is a subcontract opportunity classified under NAICS code 541611 for Computer Systems Design Services, with a response deadline of August 24, 2026, at 2:00 PM. The solicitation was posted on July 24, 2026, and there is no set-aside designation or type specified. The contract demands rigorous compliance documentation and accountability, with no provision for informal or partial attestations. Contractors must demonstrate prior experience in federal software compliance, secure development lifecycle management, and must be prepared to substantiate claims with evidence such as artifact logs, code reviews, and third-party validation where applicable. Participation requires full understanding and implementation of NIST SSDF controls across the entire software supply chain.