ATTACHMENT 1 CSCRM Questionnaire with isso 27001 Aug 2026.xlsx

This file is a Cybersecurity Supply Chain Risk Management (C-SCRM) questionnaire template designed to assess security compliance and practices for vendors responding to the Mobile & Data Services solicitation for the U.S. Embassy Panama. The questionnaire is formatted as an Excel spreadsheet with evaluation criteria aligned to ISO 27001 information security management standards, with anticipated updates through August 2026. The document serves as a mandatory submission requirement for all offerors and is intended to evaluate vendors' capability to meet federal cybersecurity and supply chain risk management standards applicable to government telecommunications and data services contracts.

The questionnaire template likely contains detailed questions addressing key security domains such as information security policies, access controls, incident management, vendor management, asset protection, and compliance frameworks. Offerors are required to complete and submit this questionnaire as part of their proposal package due by 3:00 p.m. on October 13, 2026, alongside other mandatory documents including SF-1449, pricing proposals, representations and certifications, IRS Form W-14, SAM registration proof, and the State Department Secure Software Development Attestation Form. The questionnaire functions as a critical evaluation tool for the contracting officer to determine vendor eligibility and suitability for managing sensitive government communications and data infrastructure.