**October 8, 2026: Amendment 1 has been posted! The purpose of this Amendment is to extend the RFP due date to 1 p.m. Friday, October 16, 2026 to allow additional time for questions and answers reguarding the solicitation to be posted. That Amendment should be posted no later than Wednesday, October 14, 2026. **
The Federal Deposit Insurance Corporation invites you to submit a proposal for the Software Supply Chain Security Solution. The Section B Price Schedule is within the attached RFP, but we require all offerors to complete the Software Supply Chain Container Excel Worksheet file (separate attachment to this contract opportunity). Please follow ALL instructions when completing the workbook. The RFP is non-transferable, unless approved in advance by the Contracting Officer. Please refer to the RFP package for all the requirements of this acquisition.
Offerors are also required to complete the Pre-Award Supply Chain Risk Management spreadsheet attachment in accordance with the solicitation requirements.
Please be sure to clearly indicate on the proposal response all contact information (i.e. account representative name, email addresses and phone numbers). Offerors shall pay particular attention to Section 7.3.1-06 “Identification and Delivery of Proposals-March 2009” of the RFP for specific proposal submission instructions.
Any questions regarding the solicitation shall be submitted to Hamilton Jackson at hamjackson@fdic.gov no later than 12:00 p.m. (noon) Friday, October** 2, 2026**.
To be considered for this opportunity, offerors shall provide all information required in the RFP, by 1** p.m. Friday, October 9, 2026****.**
Any missing volumes or required information in the proposal submission may be considered non-responsive.
The contractor shall provide a Software Supply Chain Security Solution consisting of: access to a comprehensive catalog of secure, hardened container images; continuous vulnerability monitoring and rapid remediation services; compliance artifacts including Software Bills of Materials (SBOMs), attestations, and provenance documentation; an enterprise management portal with authentication integration; API access to container registry for automated workflows; and professional services for implementation, integration, and ongoing support. The contractor must also provide a Technical Consultant for integration with the FDIC's JFROG pipeline and a Security Control Specialist to support NIST SP 800-53 security control mapping and compliance documentation.
We post new it & software opportunities in Virginia as agencies publish them. Get them in one email — free, and unsubscribe whenever.
"CORHQ-26-R-0394 A00001 Extend RFP Due Date.pdf"164533"file"".pdf""1""2026-10-08T21:26:39.076+00:00""f30c85785b164435914fcbbbed1a3be7""public""0""public""23a99651c1bb41ecb4b415377355dc39""0"5"0""CORHQ-26-R-0394 Updated 10.8.26.pdf"794491"file"".pdf""1""2026-10-08T21:26:39.076+00:00""9333595147744bfbbc1461288a26bc43""public""0""public""abcaba1d47494575b658d76d2c3bbcae""0"4"0""Software Supply Chain Container Price Schedule 9.28.26.xlsx"26399"file"".xlsx""1""2026-09-28T16:33:41.382+00:00""1ace07e2b7934a629a1ecec6e773493d""public""0""public""680c8a936555460f8be582719f43fdc9""0"3"0""Pre-Award SCRM Info.xlsx"20437"file"".xlsx""1""2026-09-28T16:33:41.382+00:00""e7011beb7ea7438cbca13c5492833545""public""0""public""c76234477df6400e8e88bb3fce77f328""0"2"0""CORHQ-26-R-0394 Software Supply Chain Container.pdf"607598"file"".pdf""1""2026-09-28T16:33:41.382+00:00""128737a6286e4918911005e51482a683""public""2026-10-08T21:26:39.076+00:00""1""public""ed4bce7eb4f04f5ca4572cdeb4340c2a""0"1"0""2026-10-08T21:26:39.076+00:00"Most Virginia work asks for the two below, and the solicitation documents are where it’s stated. One prequalification covers both — on this bid and the next.
A surety’s written statement that it expects to bond you up to a stated amount, subject to final underwriting. It’s what an agency asks to see before they take your bid seriously.
Source: SAM.gov (notice 2266ca6fde0744ffa7197e6f0fac67ce), retrieved via the SAM.gov Get Opportunities API. View the official posting, and always confirm requirements and deadlines with the issuing agency.