Supply Chain Risk Management & ICTS Compliance

The contract requires strict adherence to supply chain integrity by sourcing all hardware and software exclusively from original equipment manufacturers or authorized resellers, ensuring that every component traces back to legitimate, verified origins. Comprehensive chain-of-custody documentation must be maintained throughout procurement, handling, and delivery to demonstrate accountability and prevent tampering or unauthorized substitution. Compliance with CFR Title 15 Part 7 is mandatory, prohibiting any transactions involving information and communication technology and services linked to foreign adversaries, with rigorous screening protocols implemented to identify and exclude restricted entities or products. All activities must align with federal security standards to safeguard against embedded threats and ensure the integrity of the technology infrastructure deployed under this subcontract. This subcontract, issued under NAICS code 423430 by the Department of Veterans Affairs through its Technology Acquisition Center, is open for response until May 15, 2026, and emphasizes operational security over commercial flexibility. The requirement extends beyond vendor selection to include ongoing monitoring and documentation practices that support audit readiness and regulatory compliance. Failure to maintain uncontested chain-of-custody records or inadvertently engaging with prohibited foreign entities could result in contract termination or legal consequences. While the place of performance and point of contact details are not specified, the obligations are binding regardless of geographic location, and the contractor must ensure all operations support the security posture mandated by federal law.