Supply Chain Risk Management and SBOM Development

The contract calls for the development and ongoing maintenance of a Comprehensive Supply Chain Risk Management plan aligned with NIST SP 800-161 and NIST SP 800-53 Rev 5 standards, specifically tailored for cloud services. A core deliverable is the creation and continuous updating of Software Bills of Materials to ensure transparency and traceability of all software components, enabling effective identification and mitigation of supply chain vulnerabilities. The effort is structured to meet federal cybersecurity requirements and support the integrity of digital infrastructure managed by the Department of Justice. This procurement is a Small Business Set Aside under NAICS code 541512, indicating it is reserved exclusively for small business concerns. The place of performance is designated as Anthony, TX, with a response deadline of August 17, 2026. The solicitation is categorized as a subcontract, meaning it is part of a larger contracting arrangement and requires compliance with the prime contractor’s obligations and protocols. All work must adhere to the NIST frameworks and be executed to support federal agency cybersecurity posture through enhanced supply chain visibility and risk management practices.