Supply Chain Risk Management (SCRM) Compliance and Reporting

The contract requires comprehensive identification, assessment, and reporting of supply chain risks associated with IT components used in performance of the subcontract. The work focuses on ensuring compliance with supply chain risk management standards, particularly for systems and technologies integrated into federal operations under the Federal Deposit Insurance Corporation. All activities must align with the NAICS code 541611, indicating services related to computer facilities management and IT systems design and integration, with a strict emphasis on securing the integrity of hardware, software, and associated supply chains from potential threats or vulnerabilities. The place of performance is designated as Arlington, VA, with a response deadline of April 28, 2026, at 6:00 PM Eastern Time. The subcontract is open for bidding with no specific set-aside designation, and the contracting officer or point of contact details are not provided. All submitted assessments must include detailed documentation of risk exposure, mitigation strategies, and compliance evidence, with deliverables expected to meet federal cybersecurity and procurement guidance. Bidders are expected to demonstrate experience in evaluating third-party vendors, tracing component origins, and reporting findings in accordance with federal standards for critical infrastructure protection.