Software Bill of Materials (SBOM) Generation and Management

The contract mandates the development, maintenance, and timely delivery of Software Bill of Materials (SBOMs) in standardized formats such as SPDX and CycloneDX, with a strict turnaround requirement of 10 business days from the date of request. The deliverables must include a comprehensive inventory of all software components and seamless integration with existing CI/CD pipelines to ensure continuous visibility and control over software dependencies. This effort supports supply chain transparency and cybersecurity compliance for software systems used by the U.S. Department of State. The contract is classified as a subcontract under NAICS code 541512 and is issued by the U.S. Embassy in Podgorica, with performance required at the embassy’s location in Podgorica, Montenegro, under the zip code 81000. The solicitation was posted on July 24, 2026, and responses must be submitted by August 24, 2026. Although no set-aside classification or point of contact is specified, the scope clearly emphasizes operational readiness, regulatory alignment, and technical precision in managing software composition documentation for federal use.