C-SCRM Questionnaire.xlsx

The file is a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire designed for vendors to complete when submitting an offer for a federal contract. The questionnaire is structured in three sections: Contact Information, Vendor Risk Management Plan, and Physical and Personnel Security, with each section requiring detailed responses mapped to NIST SP 800-53 security references. Vendors must provide information about their company, primary point of contact, supply chain threat identification, supplier management practices, background check policies, equipment security procedures, and insider threat training.

This questionnaire is specifically related to a solicitation (19EC7525Q0004) by the U.S. Embassy in Quito, Ecuador, for Cellphone Communication Services. The solicitation requires vendors to submit this C-SCRM Questionnaire along with other documents like SF-1449, pricing information, and representations and certifications. Key submission details include: a pre-quotation conference on July 30, 2025, quotation deadline of August 15, 2025 at 16:00 hours, electronic submission to QuitoContracts@state.gov, and mandatory SAM registration. The government intends to award the contract using a comparative evaluation method to determine the best value offer.