Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Get CLEATUSFree Trial

Get CLEATUSFree Trial

Search

Top

Back to Contracts

Vulnerability Exploitability eXchange (VEX) Reporting

Active

Federal

Response Deadline08/12/2026, 09:00:00 PM UTC

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

The contract requires the production and timely delivery of Vulnerability Exploitability eXchange (VEX) documents within three days of identifying a software vulnerability, specifically to enable government stakeholders to make informed, risk-based decisions. This obligation underscores the critical need for rapid and accurate reporting to support cybersecurity posture and incident response efforts. The deliverables must align with established VEX standards to ensure clarity, consistency, and utility for decision-makers within the Department of State. This subcontract is issued by the US Embassy Pretoria under the Department of State and is governed by NAICS code 541512, which pertains to custom computer programming services. The solicitation was posted on July 31, 2026, with a response deadline of August 12, 2026, and the performance location is designated as Pretoria. While specific point of contact details are not provided, the work is expected to be conducted in direct support of U.S. government operational needs in the region, emphasizing urgency, precision, and alignment with federal cybersecurity reporting protocols.

General Info

Produce and deliver VEX documents within three days of vulnerability identification for U.S. government cybersecurity decisions in Pretoria.

Agency

Department Of State → US Embassy PretoriaView Agency

NAICS

541512 - Computer Systems Design ServicesView NAICS

Place of Performance

Pretoria, ZA-GT, ZAF

Set-Aside

NONE

Documents

(0)

No documents available

AI Contract Breakdown

Uniform Contract Format

No contract breakdown available.

Cannot generate Contract Breakdown because no documents were found from this contract's source.

Timeline

PostedJul 31

subcontract

Response DeadlineAug 12

Submission deadline

Response Deadline

08/12/2026, 09:00:00 PM UTCin 11 days

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyDepartment Of State → US Embassy Pretoria

ContactsNo contacts available

OfficeN/A

Organization / Agency

Department Of State → US Embassy Pretoria

View Agency Profile

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Produce and deliver VEX documents within 3 days of identifying a software vulnerability to support risk-based decision-making by government stakeholders.

Similar Contracts

Same NAICS industry code

Virtualization Consulting IDIQThe Port of Seattle is seeking a qualified technical services partner to conduct a thorough evaluation of its existing virtualization platform, assessing its health, performance, security posture, and architectural design. The engagement aims to validate operational reliability, uncover technical risks, and identify opportunities for optimization that align with the organization’s business goals, compliance requirements, security standards, and resiliency objectives. The final deliverable will be a prioritized roadmap outlining actionable recommendations to strengthen the virtualization environment and ensure it supports current and future operational demands. The contract is issued under the Virtualization Consulting IDIQ framework and falls under NAICS code 541512, indicating it is for computer systems design and related services. The primary point of contact is Carol Hassard, with Jim Dawson serving as the project manager; inquiries should be directed to their provided contact details. The solicitation was posted on July 31, 2026, and is intended for vendors capable of delivering expert-level consulting services to evaluate and enhance the Port’s critical infrastructure. The work will be performed in support of the Port’s ICT Enterprise Infrastructure Services, with no specific location restrictions noted for performance.

ICT Enterprise Infrastructure Services

POSTED

about 3 hours ago

DEADLINE

Azure Consulting IDIQThe Port of Seattle is preparing to engage a qualified cloud services partner through an Indefinite Delivery/Indefinite Quantity (IDIQ) contract to support the adoption, modernization, and optimization of Microsoft Azure cloud and hybrid environments. The primary focus will be on evaluating and strengthening the existing Azure architecture, guiding the implementation of new services, and ensuring all deployments align with organizational standards, operational requirements, and long-term scalability goals. Key objectives include enhancing security posture, improving system resiliency, and optimizing cloud performance to meet evolving business needs. The partner will be expected to provide expert consultation throughout the lifecycle of Azure initiatives, from design and deployment to ongoing refinement and compliance validation. This engagement is managed by the Port of Seattle’s ICT Enterprise Infrastructure Services division, with primary point of contact Carol Hassard and Project Manager Jim Dawson overseeing the process. The solicitation is posted under NAICS code 541512 for computer systems design services, with all work expected to be performed in alignment with the Port’s internal frameworks and security protocols. The anticipated timeline for this initiative begins with a forecast posting in July 2026, signaling the upcoming availability of formal solicitation documents for qualified vendors.

ICT Enterprise Infrastructure Services

POSTED

about 3 hours ago

DEADLINE

FIDS Software ReplacementThe Port of Seattle through its ICT Enterprise Infrastructure Services is preparing to replace its existing Flight Information Display System software with a new solution to enhance airport operations and passenger information capabilities. This initiative is classified under NAICS code 541512 for Custom Computer Programming Services and is currently in the forecasting stage with a posted date of July 31, 2026. The project involves developing and deploying modern software tailored to display real-time flight data across multiple terminals, ensuring accuracy, reliability, and seamless integration with existing airport systems. The primary point of contact is Farlis Lewis, reachable via email and phone, with Krista Sadler serving as the project manager for technical coordination and oversight. The software replacement aims to improve system performance, user interface clarity, and system scalability to meet future growth demands at the airport. While the specific technical requirements and procurement timeline have not yet been released, interested vendors should prepare to demonstrate expertise in aviation information systems, real-time data integration, and customer-facing display technologies. The place of performance is likely centered at Seattle-Tacoma International Airport, and there is no indication of a set-aside for small businesses or other socioeconomic categories at this stage. All inquiries and future solicitations will be coordinated through the provided contact information and the official solicitation portal linked in the data.

ICT Enterprise Infrastructure Services

POSTED

about 3 hours ago

DEADLINE

Solicitation # 0000039947

The State Air Resources Board of California is soliciting proposals for the development of a Building Embodied Carbon Reporting Tool to support state climate goals by enabling accurate tracking and reporting of carbon emissions associated with building materials and construction processes. The solicitation, identified as RFP 2526053 with solicitation number 0000039947, was posted on July 31, 2026, and responses are due by September 4, 2026. The tool must be designed to meet California’s regulatory and environmental reporting needs, with all work performed within the state. The contract is classified under a SLED procurement type, indicating it is targeted at state, local, or educational entities, though no specific set-aside provisions are indicated. Proposals must demonstrate technical expertise in carbon accounting, data integration, and software development capable of handling complex building lifecycle emissions datasets. Jyoti Patel Osby serves as the primary point of contact for all inquiries related to this solicitation and can be reached at jyoti.patelosby@state.ca.gov. The solution must be fully functional, scalable, and aligned with existing state environmental data systems, ensuring seamless interoperability and long-term usability by regulatory agencies, builders, architects, and other stakeholders. While no NAICS code or organizational set-aside is specified, applicants are expected to have proven experience in environmental data platforms and government procurement processes. All submissions must conform to the requirements outlined in the downloadable solicitation documents available via the provided California eProcure link, and compliance with California’s legal and policy frameworks for greenhouse gas reporting is mandatory.

State Air Resources Board

POSTED

about 21 hours ago

DEADLINE

in about 1 month

Telemetry Monitoring System SupportThe contract requires the installation, ongoing maintenance, and technical support of IoT-based telemetry systems designed to monitor microbulk tank levels, usage patterns, and system anomalies in real time. These systems must ensure secure data transmission and seamless integration with existing data infrastructure to enable accurate tracking and proactive issue resolution. The scope emphasizes reliable, continuous operation with a focus on data integrity and security to support operational efficiency and regulatory compliance. This subcontract is issued under NAICS code 541512 and is open for bids until August 31, 2026, with the work to be performed for the California Department of Toxic Substances Control. Though specific location details are not provided, performance is expected to support statewide operations under California’s regulatory framework. The solicitation does not specify set-aside status or point of contact, and all submissions must be made through the CalEProcure portal by the stated deadline.

California Department Toxic Substances Control

POSTED

about 21 hours ago

DEADLINE

in about 1 month

Annual Maintenance for Point of Sale and Inventory Software

Solicitation # IW250184

The Texas Department of Criminal Justice is seeking proposals for annual maintenance services related to its Point of Sale and Inventory Software, under solicitation number IW250184. This procurement is open to qualified vendors capable of providing ongoing support, updates, and technical assistance to ensure the continued reliability and functionality of the software systems used across TDCJ operations. The solicitation was posted on July 31, 2026, with responses due by August 14, 2026, and is issued by a state, local, or educational government agency as defined by the SLED classification. All performance of the contracted maintenance services is expected to take place within the state of Texas. Thressa Jacobs serves as the primary point of contact for this solicitation, reachable via phone at 936-437-3837 or email at thressa.jacobs@tdcj.texas.gov. Prospective bidders must submit their responses through the designated Texas SmartBuy portal, accessed via the provided UI link. There is no designated small business set-aside or NAICS code specified in the solicitation, meaning all eligible vendors may respond without restriction based on business size or category. The contract will cover one year of continuous software maintenance, and vendors should ensure their offerings align with the operational needs of a large correctional system, including data security, system uptime, and integration compatibility with existing infrastructure.

Texas Department of Criminal Justice

POSTED

about 21 hours ago

DEADLINE

Travel Alberta - Request for Quotes - Enterprise Data Platform Modernization

Solicitation # AB-2026-05406

Travel Alberta is issuing a request for quotes to engage a qualified service provider for the complete migration of its enterprise data analytics and reporting platform from Domo and Looker to Microsoft Fabric and Power BI. The primary objective is to enhance operational efficiency and lay the groundwork for future enterprise-level AI-driven data integration, automation, and advanced analytics capabilities. This procurement is strictly limited to implementation services associated with the migration process, excluding any ongoing support, platform management, or future enhancement activities. Travel Alberta reserves the right to conduct a separate competitive process for managed services or post-migration work, and participation in this RFQ does not confer any entitlement to future procurement opportunities. The solicitation is open with a response deadline of August 25, 2026, and is identified by the number AB-2026-05406. Interested parties must submit their proposals through the designated portal, with all inquiries directed to the Procurement Department at Travel Alberta. The contract performance will be centered in Alberta, with no specific city designated, and all communications must be routed through the official procurement email or phone provided. This initiative represents a strategic shift toward leveraging Microsoft’s modern data ecosystem to better support data-driven decision-making across the organization.

POSTED

about 23 hours ago

DEADLINE

ENTERPRISE SUSTAINMENT MANAGEMENT SYSTEM (SMS) SUPPORT

Solicitation # 0027-N

The State of Wyoming, through its Wyoming Military Department and A&I Procurement Office, is soliciting proposals for comprehensive support of the ENTERPRISE SUSTAINMENT MANAGEMENT SYSTEM (SMS), including system maintenance, updates, and mandatory 20% asset inspections across facilities and equipment. The contractor must ensure the SMS database remains accurate and fully operational, performing regular inspections to verify compliance and data integrity. Proposals must be submitted via the Public Purchase online bidding system no later than 2:00:00 P.M. Mountain Time on August 31, 2026, and all submissions must be fully uploaded by the deadline; incomplete uploads will result in automatic disqualification. Questions regarding the solicitation must be submitted individually through the same system by 2:00:00 P.M. Mountain Time on August 14, 2026, and no inquiries received after this date will be addressed. Bidders are solely responsible for monitoring the Public Purchase portal for any addenda, updates, or responses to questions, as the office will not communicate this information through email, phone, fax, or mail. Documents must be provided in PDF, Excel, or Microsoft Office format, and participants must register at no cost via the official Public Purchase portal to participate. The solicitation is identified by number 0027-N and is posted under the agency name Wyoming Military Department with Jamie Raff listed as the primary point of contact.

State of Wyoming

POSTED

about 23 hours ago

DEADLINE

Legacy COBOL System Analysis and DocumentationThe contract requires a detailed analysis and documentation of the existing PC Genesis ERP system, which is built on COBOL and ACUCOBOL technologies, to ensure that the modern replacement system achieves full functional equivalency. This includes mapping all current business processes, data flows, workflows, and system behaviors to ensure no functionality is lost during the transition. The work demands deep technical expertise in legacy COBOL systems, including the ability to interpret complex mainframe logic, understand proprietary file structures, and document system interactions that may not be fully specified in existing documentation. The effort is being conducted under a subcontract arrangement for the Georgia office of the Department of Education, with work expected to be performed in support of a broader modernization initiative. The solicitation was posted on July 31, 2026, with responses due by August 28, 2026, and falls under NAICS code 541512 for computer systems design services. Although no specific location is provided for performance, the scope implies on-site or close collaboration with Georgia-based system users and stakeholders to validate the accuracy of the documentation and ensure alignment with operational needs. The success of the project hinges on comprehensive, precise, and auditable documentation that serves as the foundational reference for rebuilding the ERP system in a contemporary technology environment.

Department of Education

POSTED

about 23 hours ago

DEADLINE

ERP-¿Continuation and Support (No Cost Bid)

Solicitation # 41400-eRFP-001870-2027

The Georgia Department of Education is soliciting qualified suppliers to replace its legacy PC Genesis ERP system—a decades-old financial and administrative application built on Micro Focus AcuCOBOL and originally derived from a Wang platform—at no cost to the agency. The modernization effort aims to deliver a scalable, secure, and sustainable ERP solution that maintains full functional equivalency with the existing system while supporting the operational needs of Georgia’s K-12 school districts. The new system must encompass core modules including Financial Accounting, Budgeting, Payroll, HR, Leave Management, and State and Federal Reporting, with strict requirements for data migration integrity, 99.99% uptime, disaster recovery with defined RTO and RPO, and full compliance with FERPA and Georgia state laws including O.C.G.A. §§ 50-5-84 and 13-10-91. The solution must be hosted and supported within the continental United States, implement multi-factor authentication, role-based access controls, and robust audit logging, and fully integrate with existing third-party systems such as student information systems and payroll processors. The solicitation, numbered 41400-eRFP-001870-2027 and posted on July 31, 2026, with a submission deadline of August 28, 2026, evaluates proposals based on a comprehensive set of technical factors including proven experience in modernizing legacy COBOL-based ERPs, public-sector K-12 experience, proposed key personnel qualifications, technical approach, usability including ADA compliance, security architecture, and transition planning within a one-year timeline. While no monetary value is assigned due to the “no cost bid” structure, awards will be determined through a trade-off process prioritizing technical merit over price. The contract includes a base period ending June 30 and four one-year option periods exercisable at the state’s discretion. Offerors must submit redlined versions of the state’s standard contract if they propose exceptions, provide attestations regarding litigation, debarment status, immigration compliance, and scrutinized company affiliations, and upload required documentation such as tax compliance forms, contractor affidavits, and data migration methodologies via the GA@WORK Marketplace. The primary point of contact is Amanda Gibson of the Georgia Department of Education, and all performance must occur within the State of Georgia, with support functions restricted to the continental U.S.

Department of Education

POSTED

about 23 hours ago

DEADLINE

HIPAA-Compliant IT Security ImplementationThe contract requires the design and implementation of comprehensive technical, administrative, and physical safeguards to ensure the protection of electronic Protected Health Information in full compliance with HIPAA and HITECH regulations. This includes seamless integration with existing University Health systems, ensuring that all data handling processes meet federal privacy and security standards. The contractor must also complete all necessary security documentation, demonstrating adherence to required frameworks and enabling audit readiness. The opportunity is structured as a subcontract under the NAICS code 541512, with a posted date of July 31, 2026, and a response deadline of August 28, 2026. The work is associated with University Health in Texas, though specific performance location details are not provided. All activities must align with the regulatory requirements governing health information security, and the selected party will be responsible for maintaining ongoing compliance through implemented controls, documentation, and system integration efforts.

University Health

POSTED

DEADLINE

Configuration and Technical Compliance ServicesThe contract requires the pre-delivery configuration, testing, and validation of Moxa equipment to ensure full compliance with specified technical requirements. This includes verifying firmware versions, conducting rigorous functionality checks, and confirming that all systems operate as intended prior to delivery. The work must be performed in strict accordance with established technical standards to guarantee reliability and performance in the field. This subcontract is issued by the Texas Department of Transportation under NAICS code 541512 and is open for response until August 14, 2026. The opportunity was posted on July 31, 2026, and the place of performance is not specified, but the work is intended to support Texas infrastructure projects. All deliverables must meet the technical compliance criteria outlined by the agency, with no set-aside classification applied.

Texas Department Of Transportation

POSTED

DEADLINE

More opportunities from Department Of State → US Embassy Pretoria

Same awarding agency

Personnel Access Compliance (DOS PIV Policy)Contractors must ensure all personnel requiring access to U.S. Department of State facilities or systems in Johannesburg comply fully with the Department's Personal Identity Verification policy, encompassing rigorous identity proofing and thorough background screening procedures. This subcontract mandates strict adherence to DOS PIV standards to maintain security and integrity of government assets, with no exceptions for contractor staff regardless of role or duration of access. The opportunity is posted under NAICS code 561612, with a response deadline of August 12, 2026, and is tied to operations at the U.S. Embassy Pretoria, though performance will occur in Johannesburg. The contract is structured as a subcontract with no set-aside designation, and participation requires full alignment with federal identity verification protocols to enable authorized physical and system access.

Security Guards and Patrol Services

POSTED

DEADLINE

Attestation for Major Software UpdatesThe contract requires the preparation and submission of formal attestation documents following major software version upgrades, to verify adherence to NIST secure software development practices. This obligation ensures that all updates to software systems meet federal security standards, with documentation serving as evidence of compliance throughout the development and deployment lifecycle. The work must be completed in accordance with established timelines and deliverables, with no flexibility in the required compliance framework. The contract is classified as a subcontract under NAICS code 541611 and is issued by the U.S. Embassy Pretoria under the Department of State. The place of performance is specified as Johannesburg, though no additional address details are provided. Responses are due by August 12, 2026, with the opportunity posted on July 31, 2026. No set-aside type is designated, and the solicitation number is not provided. The point of contact information is omitted, and the official listing can be accessed via the SAM.gov link provided.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Cybersecurity Incident Response and ReportingThe contract requires the contractor to monitor for cybersecurity incidents specifically related to supply chain compromises and to report any confirmed events to the U.S. government within 12 hours of discovery. This obligation is critical to maintaining the integrity and security of systems connected to U.S. diplomatic operations. The work is to be performed in Johannesburg, with the U.S. Embassy Pretoria under the Department of State serving as the contracting agency, and falls under the NAICS code 541611 for computer systems design and related services. The solicitation is structured as a subcontract and was posted on July 31, 2026, with a mandatory response deadline of August 12, 2026. Timeliness and accuracy in incident reporting are non-negotiable priorities, and the contractor must possess the technical capability to detect, analyze, and escalate supply chain-based cyber threats swiftly and securely.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Vulnerability Exploitability Exchange (VEX) ReportingThe contract requires the monitoring of software components for newly identified vulnerabilities and the timely publication of Vulnerability Exploitability Exchange (VEX) documents within three days of detection to clearly communicate the exploitability status to the U.S. government. This obligation is critical for ensuring that federal stakeholders receive accurate, actionable intelligence on potential cybersecurity risks associated with software used in government operations. The performance location is specified as Johannesburg, and the work falls under the NAICS code 541690, indicating it is classified as other professional, scientific, and technical services, likely involving cybersecurity analysis or software assurance functions. This is a subcontract issued by the U.S. Embassy Pretoria under the Department of State, with a response deadline of August 12, 2026, and a posted date of July 31, 2026. The urgency of the requirement underscores the need for rapid response capabilities, as delays beyond the three-day window could compromise government security posture. The absence of a set-aside designation or specific point of contact suggests the solicitation is open to qualified subcontractors without preferential treatment, and performance is expected to meet strict federal cybersecurity reporting standards without room for deviation.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE

Software Bill of Materials (SBOM) Generation and ManagementThe contract requires the creation, ongoing maintenance, and timely delivery of standardized Software Bill of Materials (SBOMs) in SPDX and CycloneDX formats for all software components used within the scope of the agreement. This involves continuous updates to SBOMs whenever software patches are applied or version changes occur, ensuring accurate, up-to-date inventory tracking of third-party and open-source dependencies throughout the software lifecycle. The deliverables must meet industry-standard formats and be reliable enough to support security, compliance, and supply chain integrity requirements. The contract is structured as a subcontract under the US Embassy Pretoria, part of the Department of State, with performance located in Johannesburg. It was posted on July 31, 2026, with responses due by August 12, 2026, and falls under the NAICS code 541511 for custom computer programming services. There is no set-aside designation, and while no point of contact is listed, the work is tied to federal operations requiring strict adherence to software transparency and cybersecurity best practices.

Custom Computer Programming Services

POSTED

DEADLINE

Secure IT Equipment Supply (Commercial Off-the-Shelf Hardware)The contract pertains to the procurement and delivery of secure commercial off-the-shelf IT equipment that meets U.S. federal supply chain integrity standards, explicitly excluding any telecommunications hardware restricted under Section 889 of Public Law 115-232. The equipment must be sourced from vendors compliant with federal security and trustworthiness requirements to ensure the integrity of information systems used by U.S. government entities abroad. This is a subcontract opportunity issued by the U.S. Embassy Pretoria under the Department of State, with performance specifically designated for Johannesburg. All offerings must adhere to NAICS code 423430 for electronic appliance and equipment wholesalers, and suppliers must demonstrate full compliance with federal mandates regarding domestic sourcing and supply chain risk mitigation. The solicitation is open for responses until August 12, 2026, with proposals due by 9:00 PM Eastern Time. There is no set-aside designation for small businesses or other categories, indicating this opportunity is open to all eligible contractors. While no specific point of contact or detailed address information is provided, the contract is administered through the U.S. Department of State’s overseas operations and will require vendors to supply hardware that supports secure communications and data handling for diplomatic missions. Potential bidders must ensure their offerings are vetted and certified as free from components or manufacturers identified as national security risks under federal law.

Computer and Computer Peripheral Equipment and Software Merchant Wholesalers

POSTED

DEADLINE

Subcontractor and Supplier Network TransparencyThe contract requires the maintenance and full disclosure of subcontractor and supplier network data to ensure strict compliance with federal supply chain restrictions and mandatory flow-down requirements. This obligation applies to all tiers of the supply chain, demanding accurate, up-to-date, and transparent reporting of entities involved in delivering goods or services under the agreement. The goal is to safeguard against involvement with prohibited sources and to align with U.S. government policies on secure and trusted supply chains, particularly in sensitive federal operations. The contract is issued by the U.S. Embassy Pretoria under the Department of State, with the performance location set in Pretoria. It is classified under NAICS code 541611, indicating it relates to management consulting services. Interested parties must respond by the deadline of August 12, 2026, and are expected to demonstrate robust systems for tracking, documenting, and reporting subcontractor and supplier information in real time to meet federal compliance standards. There is no set-aside designation specified, and all eligible contractors may compete for this opportunity.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Government-Authorized System Testing SupportThe contract entitled Government-Authorized System Testing Support authorizes subcontractors to provide specialized testing services for IT systems on behalf of the US Embassy Pretoria under the Department of State. The work involves both non-destructive and destructive testing methodologies, including penetration testing and detailed component-level analysis, designed to evaluate the security posture and resilience of government IT infrastructure. The contract is classified under NAICS code 541350, which pertains to computer systems design and related services, indicating that the scope focuses on technical, security-oriented cyber assessments rather than general IT support. The solicitation, posted on July 31, 2026, has a firm response deadline of August 12, 2026, at 9:00 PM Eastern Time. Performance is to be conducted at the US Embassy in Pretoria, and the contract is structured as a subcontract, meaning the prime contractor will be responsible for engaging and managing any subcontractors performing the work. While no set-aside provisions or point of contact details are provided, the work is critical for maintaining the security integrity of US government systems abroad and requires strict adherence to authorized testing protocols, with no tolerance for unauthorized or uncontrolled access beyond the scope of government authorization.

Building Inspection Services

POSTED

DEADLINE

Compliance Attestation for Software UpdatesThe contract requires formal attestation of cybersecurity compliance following major software version updates, ensuring that all systems remain in alignment with federal security standards. This service is critical to maintaining the integrity and security of information systems used by the US Embassy in Pretoria, particularly after any significant software changes that could impact data protection or operational continuity. The attestation must be thorough, documented, and verified to confirm adherence to applicable federal requirements, with no room for assumption or informal validation. This is a subcontract opportunity under NAICS code 541611, indicating it falls under Management, Scientific, and Technical Consulting Services, with a response deadline of August 12, 2026. The work is performance-based at the US Embassy in Pretoria, and while no specific set-aside or organizational type is indicated, the requirement is tied directly to the Department of State’s need for consistent and auditable compliance. Entities interested must deliver a verifiable, authoritative confirmation that cybersecurity controls remain effective post-update, with no provision for delays or deviations from federal mandates.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

Cybersecurity Incident ResponseThe contract titled Cybersecurity Incident Response requires the contractor to detect, report, and respond to cybersecurity incidents within twelve hours of discovery, ensuring seamless coordination with government stakeholders. This subcontract is issued by the US Embassy Pretoria under the Department of State and is tied to performance in Pretoria, South Africa. The NAICS code 541512 indicates it falls under Computer Systems Design and Related Services, pointing to a focus on technical cybersecurity capabilities and operational response. The solicitation was posted on July 31, 2026, with a firm response deadline of August 12, 2026, at 9:00 PM Eastern Time, leaving a narrow window for interested parties to submit proposals. There is no set-aside designation specified, meaning competition is open to all eligible entities regardless of size or status. The emphasis on rapid response underscores the critical nature of maintaining secure digital infrastructure for U.S. government operations in the region.

Computer Systems Design Services

POSTED

DEADLINE

Software Bill of Materials (SBOM) Development and ManagementThe contract requires the generation, maintenance, and timely submission of Software Bill of Materials (SBOMs) to ensure full traceability of software components and compliance with transparency and security standards. This work is critical for verifying the integrity of software used in U.S. diplomatic operations, particularly in support of cybersecurity and supply chain risk management obligations. The contractor must establish robust processes to document all third-party and open-source components, track version histories, and deliver updated SBOMs upon request to meet regulatory and operational demands. The contract is classified as a subcontract under NAICS code 541512, indicating it involves custom computer programming services. It is managed by the U.S. Embassy Pretoria under the Department of State, with performance required in Pretoria. The solicitation was posted on July 31, 2026, and responses are due by August 12, 2026. While no set-aside provisions or point of contact details are provided, the emphasis on SBOM delivery underscores the urgency of adhering to federal software transparency mandates, making compliance, accuracy, and responsiveness central to successful performance.

Computer Systems Design Services

POSTED

DEADLINE

Cybersecurity Supply Chain Risk Management (C-SCRM) ComplianceThe contract requires implementation of federal cybersecurity supply chain risk management practices with a focus on identifying and mitigating risks associated with covered telecommunications equipment and services, ensuring alignment with U.S. government standards for secure procurement. This subcontract is issued by the U.S. Embassy Pretoria under the Department of State and is categorized under NAICS code 541690, indicating it involves other scientific and technical consulting services related to cybersecurity. The performance location is designated as Pretoria, South Africa, suggesting the work will be executed in support of U.S. diplomatic operations abroad, requiring strict adherence to national and international cybersecurity protocols to safeguard sensitive communications infrastructure. The solicitation is set to close on August 12, 2026, with a deadline of 9:00 PM local time, and the opportunity was posted on July 31, 2026, indicating a brief but critical window for qualified contractors to respond. There is no specified set-aside type, meaning the contract is open to all eligible entities without preference based on business size or other classifications. Compliance with federal supply chain security requirements is mandatory, particularly concerning the use of equipment and services from vendors deemed restricted under U.S. law, and the successful bidder must demonstrate proven capability in assessing, managing, and continuously monitoring supply chain vulnerabilities while operating in a foreign environment under U.S. diplomatic oversight.

Other Scientific and Technical Consulting Services

POSTED

DEADLINE