18-75A50126R00001_RFP Att 18 BCP SCP Continuity Plans.pdf
PDF 75 KB Posted
- Solicitation number
- 75A50126R00001_RFP_NPIVS_27
About this file
This document is an attachment specifying Business Continuity Plan (BCP) and Supply Continuity Plan (SCP) requirements for federal contractors.
The Contractor must develop and submit a comprehensive BCP focused on continuity of product and support service delivery to internal and external customers following catastrophic events, with the primary objective of minimizing operational interruptions in manufacturing. The plan should address events ranging from severe incidents (biocontamination, cybersecurity attacks, fire/explosion, natural disasters) to lesser severity disruptions (power outages, network disruptions, bomb threats). Contractors are encouraged to align their BCP with recognized industry standards such as ISO 22301:2019, NFPA 1660, or equivalent frameworks. The SCP may be submitted as a standalone document or incorporated into the BCP and must address strategic, sole source, and critical suppliers, subcontractors, vendors, or third-party providers whose manufacturing interruptions could disrupt contractor performance.
Both plans must articulate methodology addressing four integrated phases on a continuous timeline: (1) Risk Management (prior to event occurrence) covering proactive prevention measures; (2) Emergency Response (0-1 hour after event) protecting life and property while accounting for personnel; (3) Crisis Communications Plan (1 hour to 4 calendar days after event) requiring notification of the Contracting Officer and Contracting Officer's Representative within 24 hours of BCP activation; and (4) Business Recovery (2 calendar days to months after event) detailing action plans to return operations to pre-incident levels, including alternate manufacturing capacity, third-party sites, and buffer inventory. Recovery strategies must minimize supply disruptions with long-term impact limited to less than 6 months.
View the file
Other files
Show all 24
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Business and Supply Chain Continuity Plans – v202606
ATTACHMENT 18
Business and Supply Continuity Plans
Business Continuity Plan (BCP). The Contractor must develop and submit a comprehensive Business Continuity Plan (BCP) that provides a plan that focuses on continuity of delivery of product and support services to internal and external customers in the aftermath of a catastrophic event. The primary objective of a BCP is to minimize interruption in the event of a catastrophic event in manufacturing operations. The plan must also address events of lesser severity such as a power outage, local area network disruption, and bomb threats.
The Contractor is encouraged to align their BCP with recognized industry standards such as ISO 22301:2019, NFPA 1660, or equivalent frameworks.
An effective BCP should cover many types of business interruptions, such as:
• Biocontamination
• Bomb/Terrorist Threat
• Cybersecurity Incident / Ransomware Attack
• Critical Supplier / Supply Chain Disruption
• Fire/Explosion
• Hazardous Material Spill
• Information Management Interruption
• Infectious Disease
• Injury/Illness
• Product Contamination/Recall
• Theft/Vandalism
• Natural Disasters such as Tornado, Flood, Hurricane, Earthquake, etc.
Supply Continuity Plan (SCP). The SCP may be submitted as a standalone plan or incorporated into the BCP. The SCP must address strategic, sole source, and critical suppliers, subcontractors, vendors, or other third-party providers whose manufacturing interruptions could disrupt Contractor performance.
The Contractor must articulate in both plans the methodology for addressing risk management, emergency response, incident management, and operations recovery, all integrated into a continuous timeline starting with the onset of a catastrophic event and continuing until functionality is restored.
1. Risk Management (prior to event occurrence): Proactive measures that can be taken to prevent or minimize catastrophic events from occurring.
2. Emergency Response (0-1 hour after event): Actions that occur at the onset of a disaster to protect life and property. This includes accounting for all personnel and bringing the event under control.
Business and Supply Chain Continuity Plans – v202606
3. Crisis Communications Plan (1 hour – 4 calendar days after event): Focuses on proactive communications and initial activities necessary to establish the path towards operations recovery. The expectation is as part of the communication process you will notify your Contracting Officer (CO) and Contracting Officer's Representative (COR) within 24 hours of activating the BCP.
4. Business Recovery (2 calendar days - months after event): Focuses on an action plan to return operations to pre-incident levels. The action plan is based on the “worst case” scenario of loss of building(s) that are essential to the company’s operations. This can include alternate manufacturing capacity within your company or a 3rd-party site, buffer inventory, etc. through full recovery.
The expectation is that any recovery strategy will minimize supply disruptions and limit the long-term impact to less than 6 months.
File details come from the government source that posted it. Updated .