Supply Chain Security & Software Bill of Materials (SBOM)

The contract requires the generation and ongoing maintenance of a Software Bill of Materials (SBOM) that meets NTIA compliance standards for all software components used in the project, with a focus on ensuring supply chain integrity through secure OEM procurement practices and protected transport methods. This includes documenting every software component, its version, dependencies, and origin to enable transparency, risk assessment, and rapid response to vulnerabilities across the software lifecycle. The work is structured as a subcontract under the Department of Veterans Affairs, specifically managed by the Technology Acquisition Center NJ, and falls under NAICS code 541519 for other computer-related services. The solicitation was posted on June 23, 2026, with a strict response deadline of June 30, 2026, at 4:00 PM. While no specific location for performance is provided, the deliverables must support federal security requirements, emphasizing secure software supply chain practices aligned with national standards. All activities must be completed in a manner that ensures traceability, accountability, and resilience against supply chain threats.