Supply Chain Risk Management (C-SCRM) Mitigation

The contract requires the development and submission of a Comprehensive Supply Chain Risk Management mitigation plan for all IT systems and software utilized under the agreement, with a mandatory disclosure of any compromised components within the supply chain. This obligation applies to all subcontractors and is designed to ensure the integrity and security of federal information systems by identifying and addressing potential vulnerabilities introduced through third-party hardware, software, or services. The effort must be completed with full transparency, documenting all risks and mitigation measures taken to safeguard against supply chain threats. This is a total small business set-aside under SBA guidelines, exclusively available to small businesses as defined by the NAICS code 541611, indicating the work is focused on administrative management and general management consulting services. The opportunity is issued by the Department of Justice through its FDC Philadelphia office, with performance expected to occur in Philadelphia, Pennsylvania, at the zip code 19106. Submissions must be received by the deadline of May 21, 2026, at 12:00 PM Eastern Time, and the contract is categorized as a subcontract, meaning it will be executed under a prime contract already awarded by the federal government. No point of contact is listed, and all details must be accessed through the official SAM.gov portal for further guidance.