Supply Chain Risk Management (Cybersecurity & Supplier Vetting)

The contract mandates the implementation of comprehensive supply chain risk management protocols aligned with federal cybersecurity standards, specifically requiring adherence to NIST SP 800-171 for protecting controlled unclassified information. It encompasses rigorous supplier vetting procedures to ensure third-party entities meet stringent security and compliance benchmarks before engagement, reducing exposure to potential threats within the defense industrial base. Cybersecurity incident reporting obligations are enforced under DFARS requirements, obligating timely detection, documentation, and notification of any breaches or anomalies affecting covered systems or data. This subcontract, issued by the Defense Logistics Agency under the Department of Defense, is tied to NAICS code 541611, indicating a focus on management, scientific, and technical consulting services related to cybersecurity and risk mitigation. Operations are expected to support DOD supply chain integrity across all phases of procurement and logistics, with performance obligations not tied to a specific geographic location. The contract was posted on July 15, 2026, and remains active under the procurement instrument SPE7L126D61VX with delivery order SPE7L026F5606.