RFQ - 26Q0062 - Amendment 0001 (Signed).pdf

Amendment No. 0001 Solicitation No.19TH2026Q0062

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

1. CONTRACT ID CODE

2. AMENDMENT/MODIFICATION NO.

3. EFFECTIVE DATE

August 11, 2026

4. REQUISITION/PURCHASE REQ. NO.

5. PROJECT NO. (If applicable)

6. ISSUED BY CODE

7. ADMINISTERED BY (If other than Item 6)

CODE

American Embassy Bangkok GSO/Procurement and Contracting Office 120-122 Wireless Road, Lumpini Khet Pathumwan, Bangkok 10330 THAILAND

8. NAME AND ADDRESS OF CONTRACTOR (NO., street,city,county,State,and ZIP Code) x 9a. AMENDMENT OF SOLICITATION NO.

19TH2026Q0062

9b. DATED (SEE ITEM 11) August 4, 2026

10a. MODIFICATION OF CONTRACT/ORDER NO.

10b. DATED (SEE ITEM 13)

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

[X ] The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offers [ ] is extended, [ ] is not extended Offers must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended, by one of the following methods: (a) By completing Items 8 and 15, and returning __1___ copies of the amendment;(b) By acknowledging receipt of this amendment on each copy of the offer submitted; or© By separate letter or telegram which includes a reference to the solicitation and amendment numbers.

FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS,

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(b)

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

X D. OTHER FAR 43.103(b)(1) Administrative Modifications E. IMPORTANT: Contractor [ ] is not, [ ] is required to sign this document and return ____ copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

The purpose of this amendment is to:

1) Update SECTION 1, SECTION 2, SECTION 3 and SECTION 4. See Next Page.

All other specifications, terms and conditions remain unchanged.

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

16A. NAME OF CONTRACTING OFFICER

Ramon Menendez-Carreira

15B. NAME OF CONTRACTOR/OFFEROR

BY

(Signature of person authorized to sign)

15C.DATE

SIGNED

16B. UNITED STATES OF AMERICA

BY

(Signature of Contracting Officer)

16C.DATE SIGNED

1. SECTION 1, CONTINUATION TO SF-1449, PRICES, BLOCK 23, is changed by deleting paragraph no. 2.3, 2.4 and replaced by follows:

2.3. Mini Workstation for Interactive Screen and Conference Room

Quantity

• Mini/Micro Plus Mini/Max Slim Base Unit

• Intel(R) Core(TM) Ultra 7 265 (13 TOPS NPU, 20 cores, up to 5.3GHz)

• 16GB: 1 x 16GB, DDR5, up to 5600 MT/s

• 180W PSU Core Ultra CPU 360W Platinum PSU

• Integrated Graphics

• 512GB SSD

• Wireless Keyboard and Mouse (Thai)

• Intel(R) Wi-Fi 7 BE200, 2x2, 802.11be, Bluetooth(R) wireless card

• Internal WiFi Antenna

• WLAN Driver Intel(R) Wi-Fi 7 BE200

• Optional HDMI 2.1 Port

• USB 3:2 Gen 2 Type-A PCle Card (Low Profile)

• No Additional Network Card Selected (Integrated NIC included)

• Intrusion cable switch

• Power Cord (Thai)

• Trusted Platform Module

• Internal speaker

• Windows 11 Pro

2.4. Classroom Laptop Quantity

40 50

• Intel(R) Core(TM) Ultra 7 366H vPro(R) (16 cores, up to 4.8 GHz, 50 TOPS)

• Aluminum Case

• 16 GB: 1 x 16 GB, DDR5, 5600 MT/s

• Integrated Intel(R) Graphics, 4Xe with Intel(R) Core(TM) Ultra 7 366H, vPro(R)

CPU

• 512 GB SSD

• Intel(R) Wi-Fi 7 BE211, Qualified against Bluetooth(R) Core 6.0 wireless Card

• 14", WUXGA (1920x1200), Non-touch, 400nit, 62.5% sRGB, Anti-Glare, FHD+IR Cam

• FHD RGB HDR + IR Camera, 1080p at 30 fps, Presence Detection, TNR, Camera

Shutter, Microphone

• Thai Standard Backlit Keyboard

• WLAN

• Fingerprint Reader, Smart Card Reader, Control Vault 3+

• 3-cell, 70 Wh, Long Life Cycle, ExpressCharge Boost capable battery,

• 65W USB-C AC Adapter

• E4 Power Cord 1M for Thailand

• Intel(R) BE211 WLAN Driver

• 14-16 Backpack and Mouse and Combination Cable Lock

• Windows 11 Pro, Copilot+ PC

2. SECTION 1, CONTINUATION TO SF-1449, SCHEDULE OF SUPPLIES/

SERVICES, BLOCK 20, NO. 4 CONTRACTOR RESPONSIBILITY is changed by deleting paragraph no. 3, 4 and replaced by follows:

3. Mini Workstation for Interactive Screen and Conference Room Quantity

• Mini/Micro Plus Mini/Max Slim Base Unit

• Intel(R) Core(TM) Ultra 7 265 (13 TOPS NPU, 20 cores, up to 5.3GHz)

• 16GB: 1 x 16GB, DDR5, up to 5600 MT/s

• 180W PSU Core Ultra CPU 360W Platinum PSU

• Integrated Graphics

• 512GB SSD

• Wireless Keyboard and Mouse (Thai)

• Intel(R) Wi-Fi 7 BE200, 2x2, 802.11be, Bluetooth(R) wireless card

• Internal WiFi Antenna

• WLAN Driver Intel(R) Wi-Fi 7 BE200

• Optional HDMI 2.1 Port

• USB 3:2 Gen 2 Type-A PCle Card (Low Profile)

• No Additional Network Card Selected (Integrated NIC included)

• Intrusion cable switch

• Power Cord (Thai)

• Trusted Platform Module

• Internal speaker

• Windows 11 Pro

4. Classroom Laptop Quantity 40 50

• Intel(R) Core(TM) Ultra 7 366H vPro(R) (16 cores, up to 4.8 GHz, 50 TOPS)

• Aluminum Case

• 16 GB: 1 x 16 GB, DDR5, 5600 MT/s

• Integrated Intel(R) Graphics, 4Xe with Intel(R) Core(TM) Ultra 7 366H, vPro(R)

CPU

• 512 GB SSD

• Intel(R) Wi-Fi 7 BE211, Qualified against Bluetooth(R) Core 6.0 wireless Card

• 14", WUXGA (1920x1200), Non-touch, 400nit, 62.5% sRGB, Anti-Glare, FHD+IR Cam

• FHD RGB HDR + IR Camera, 1080p at 30 fps, Presence Detection, TNR, Camera

Shutter, Microphone

• Thai Standard Backlit Keyboard

• WLAN

• Fingerprint Reader, Smart Card Reader, Control Vault 3+

• 3-cell, 70 Wh, Long Life Cycle, ExpressCharge Boost capable battery,

• 65W USB-C AC Adapter

• E4 Power Cord 1M for Thailand

• Intel(R) BE211 WLAN Driver

• 14-16 Backpack and Mouse and Combination Cable Lock

• Windows 11 Pro, Copilot+ PC

3. SECTION 2 – CONTRACT CLAUSES, is changed by adding the following:

CYBERSECURITY SUPPLY CHAIN RISK MANAGEMENT REQUIREMENTS (AUG

2024)

(a) Definitions. As used in this clause:

Covered article - The term "covered article" includes-

(1) "Information and Communications technology" which is an industry term for information technology that is involved in integrating telecommunications (e.g., telephone lines and wireless signals) and computers to enable users to access, store, manipulate, transmit, and receive digital information. This includes software, software as a service, digital and data services, and hardware components that support information creation, storage, transfer, and management, like computers and smartphones.

(2) "Telecommunications Equipment", which means equipment, other than customer premises equipment, used by a carrier to provide telecommunications services, and includes software integral to such equipment (including upgrades).

(3) "Telecommunications Service", which means the offering of telecommunications for a fee directly to the public, or to such classes of users as to be effectively available directly to the public, regardless of the facilities used.

(4) “Cybersecurity Supply Chain Risk”, which means the risk that a person may sabotage, maliciously introduce unwanted function, extract data, or otherwise manipulate the design, integrity, manufacturing, production, distribution, installation, operation, maintenance, disposition, or retirement of covered articles to surveil, deny, disrupt, or otherwise manipulate the function, use, or operation of the covered articles or information stored or transmitted on the covered articles.

(5) “Incident,” which means, per the Federal Information Security Modernization Act of 2014, “an occurrence that (A) actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or (B) constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.”

(6) "Vulnerability,” means any weakness in an information system, system security procedures, internal controls, or implementation that could be exploited or triggered by a threat source.

(b) Contractor Cybersecurity Supply Chain Risk Management Responsibilities. The Contractor must regularly identify, assess, monitor, and mitigate cybersecurity supply chain risks when providing covered articles or services to the Government. The Contractor shall maintain artifacts (i.e., any byproduct of hardware or software development that helps describe the architecture, design, and function of that hardware or software) that document its compliance with this paragraph and shall provide these artifacts to the Government within 48 hours of request, which may be redacted to remove sensitive proprietary information.

(c) Supporting Government Cybersecurity Supply Chain Risk Assessments. No more than an estimated once per year, the Contractor must provide any requested information related to its supply chain within 10 business days except information that is protected by a non-disclosure agreement with its customers (e.g., another federal agency).

(d) Novation Agreement Notice. FAR 42.1203 require Government approval of novation agreements. For proposed novation agreements for this contract, the Contractor shall provide any information requested by the Government regarding the proposed successor’s identity and information regarding its supply chain.

(e) Notification procedures for cybersecurity supply chain incidents. When an incident occurs, the Contractor must contact the CO or their designee within 72 hours of the incident.

(f) Subcontracts. The Contractor shall insert the substance of this clause in all subcontracts and other contractual instruments in support of this contract.

(g) Attestation following Major Version Change. For software provided under the contract that required an approved Secure Software Development Attestation Form, the responses on this form apply to the software’s major version changes (e.g., using a semantic versioning schema of Major, Minor, Patch, the software version number goes from 2.5 to 3.0) unless the Contractor otherwise notifies the Contracting Officer that the form is no longer valid. This notification to the Contracting Officer must be submitted within 15 days of the major version change and must include a new completed and signed Secure Software Development Attestation Form.

(end of clause)

4. SECTION 3 – SOLICITATION PROVISION, is changed by deleting paragraph no.

52.212-1 and replaced by follows:

52.212-1 INSTRUCTIONS TO OFFERORS -- COMMERCIAL PRODUCTS AND

COMMERCIAL SERVICES (MAR 2023) IS INCORPORATED BY

REFERENCE (SEE SF-1449, BLOCK 27A)

ADDENDUM TO 52.212-1

Instructions to Offeror. Each offer must consist of the following:

1. A completed solicitation, in which the SF-1449 cover page (blocks 12, 17, 19-24, and 30 as appropriate), and Section 1 has been filled out.

2. CONTRACTOR REQUIREMENTS:

2.1) The Contractor shall have been engaged in the information technology solutions business for no less than five (5) years – Proof of documentation shall be provided.

2.2) The Contractor must have worked and experienced in delivering custom to order computer devices with a project value of no less than $250,000 – Proof of documentation shall be provided.

2.3) The Contractor must be an authorized distributor or partner with the Original Equipment Manufacturer (OEM) for the core product – Proof of documentation shall be provided.

2.4) The Contractor shall complete the project, including delivering all good(s) and services(s) within 120 days of contract award and shall submit a project management plan and schedule demonstrating the ability to complete the work as stated in this SOW – Documentation shall be provided.

3. Evidence that the offeror/quoter operates an established business engaged in the information technology solutions business for no less than five (5) years –with a permanent address and telephone listing.

4. The contractor shall provide proof of SAM registration to include the SAM UEI number.

5. The contractor must be submitted a specification sheet of the product which offer in this

RFQ.

6. If you use a subcontractor:

o Please submit documentation (Item 2.1 through 2.4, 3, 4) to verify the subcontractors’s qualifications.

7. Cybersecurity Supply Chain Risk Management (C-SCRM) Forms

The offeror shall include in its offer Attachment, C-SCRM Questionnaire. In lieu of a completed C-SCRM Questionnaire, the vendor may submit a third party authorizing official conducted assessment, such as ISO 27001, ISO 9000, SOC II, or FEDRAMP authorization. Failure to follow the attachment’s instructions may result in rejection of the offer.

5. SECTION 4 – EVALUATION FACTORS, is changed by deleting SECTION 4 – EVALUATION FACTORS and replaced by follows:

• Award will be made to the lowest priced, acceptable, responsible quoter. The quoter shall submit a completed solicitation, including Sections 1 and 5 3

• The Government will perform an initial review of proposals/quotations received to determine completeness and compliance with the terms of the solicitation to include CYBERSECURITY SUPPLY CHAIN RISK MANAGEMENT (C-SCRM) Go/No-Go Evaluation Factor. The Government may reject as unacceptable proposals/quotations that do not conform to the solicitation.

C-SCRM Go/No-Go Evaluation Factor

This factor is evaluated on a go-no-go basis. The Government will evaluate whether the submitted C-SCRM Questionnaire and State Department Secure Software Development Attestation Form meet the definition for the “Go” or “No-Go” ratings for this factor. The “Go and “No-GO” ratings and their definitions are as follows:-

RATING RATING DEFINITION

GO The proposal meets the criteria in the following two (2) paragraphs.

The C-SCRM Questionnaire contains both of the following: (1) C-SCRM Questionnaire instructions are completed; and (2) contains “Yes” answers for all questions in Sections 2 and 3 of the questionnaire; or the vendor has submitted a third party authorizing official conducted assessment such as, ISO 27001, ISO 9000, SOC II, or FEDRAMP authorization.

NO-GO The proposal does not meet one (1) or more of the criteria in the following two (2) paragraphs.

The C-SCRM Questionnaire contains both of the following: (1) C-SCRM Questionnaire instructions are completed; and (2) contains Yes answers for all questions in Sections 2 and 3 of the questionnaire; or the vendor has submitted a third party authorizing official conducted assessment such as, ISO 27001, ISO 9000, SOC II, or FEDRAMP authorization.

• The Government reserves the right to reject proposals that are unreasonably low or high in price.

• The lowest price will be determined by multiplying the offered prices times the estimated quantities in “Prices - Continuation of SF-1449, block 23”, and arriving at a grand total including all options, if any.

• The Government will determine quoter acceptability will be determined by assessing the quoter's compliance with the terms of the RFQ.

• The Government will determine quoter responsibility by analyzing whether the apparent successful quoter complies with the requirements of FAR 9.1, including:

• adequate financial resources or the ability to obtain them;

• ability to comply with the required performance period, taking into consideration all existing commercial and governmental business commitments;

• satisfactory record of integrity and business ethics;

• necessary organization, experience, and skills or the ability to obtain them;

• necessary equipment and facilities or the ability to obtain them; and

• be otherwise qualified and eligible to receive an award under applicable laws and regulations.

(End of Amendment)