Supply Chain Security Risk Assessment & Compliance (SCSI)

The contract requires the completion of the Supply Chain Security Information form with a focus on comprehensive supply chain security measures including the generation of a Software Bill of Materials, thorough vetting of all third-party software components, and a rigorous national security risk assessment. This effort is aimed at ensuring the integrity and security of software and systems integrated into government operations by identifying and mitigating potential vulnerabilities introduced through external dependencies. All deliverables must meet stringent Canadian government standards for cybersecurity and supply chain resilience. The contract is classified as a subcontract under NAICS code 541611 and is issued by the Government of Canada through the Department of Agriculture and Agri-Food. Responses are due by August 17, 2026, and performance is expected to take place within Canada. The solicitation is open to qualified subcontractors capable of delivering verified, auditable security documentation and risk analyses that align with national security protocols. No set-aside provisions are specified, and the opportunity is accessible to all eligible entities meeting the technical and compliance requirements outlined in the SCSI framework.