Attachment 1_C-SCRM Questionnaire.xlsx

The file is a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire for a federal contract opportunity. The questionnaire requires vendors to provide detailed information across three sections: contact information, vendor risk management plan, and physical and personnel security. Vendors must complete the gray-shaded response columns, addressing specific items related to supply chain threat identification, supplier management, background check policies, equipment security, and insider threat training. The questionnaire references NIST SP 800-53 security controls and allows the government to request additional documentation to validate vendor responses.

The related federal contract opportunity is a Request for Quotations (RFQ) for Mobile Telephone Services for the U.S. Embassy in Ljubljana, Slovenia. The solicitation will be awarded using a comparative evaluation method, with quotations due by 10:00 AM local time on January 12, 2026. Vendors must submit their proposals electronically to LjubljanaQuotes@state.gov in specific file formats (MS-Word, MS-Excel, or PDF) with a maximum file size of 30MB. Required submission documents include SF-1449, pricing information, representations and certifications, and the completed C-SCRM Questionnaire. The Department of State intends to award the contract based on initial quotations, potentially without further discussions.