Supply Chain Transparency and SBOM Provision

The contract requires the generation and delivery of complete Software Bills of Materials (SBOMs) for all software components using either SPDX or CycloneDX formats to ensure end-to-end supply chain transparency. Compliance with NIST SP 800-161 and established supply chain risk management standards is mandatory, emphasizing the need for accurate, machine-readable, and up-to-date component inventories to mitigate vulnerabilities and enhance software integrity. The deliverables must be thorough, covering all proprietary and third-party software elements, and must support ongoing monitoring and audit readiness across the defense supply chain. This is a subcontract under the Department of Defense, issued by W6QK Acc-Ri, with a performance location at Fort Belvoir. The solicitation was posted on July 28, 2026, and responses are due by August 10, 2026. The NAICS code 541511 indicates this pertains to custom computer programming services, underscoring the technical nature of the work. There is no set-aside designation, and the contract is open to eligible subcontractors capable of meeting stringent SBOM generation and compliance requirements. All deliverables must align with federal cybersecurity guidelines and be submitted in a format that enables automated analysis and integration into existing system security frameworks.