C-SCRM Questionnaire.xlsx
XLSX spreadsheet 165 KB Posted
- Attached to
- Dedicated Internet Channel CASAB
- Solicitation number
- 19M03025Q0003
- Issued by
-
Department of State
About this file
The file is a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire for a federal contract opportunity related to a Dedicated Internet Channel at the U.S. Consulate in Casablanca. The questionnaire requires vendors to provide detailed information across three sections: contact information, vendor risk management plan, and physical and personnel security. Vendors must complete gray-shaded response fields addressing topics such as supply chain threat identification, supplier requirements, background check policies, and insider threat training.
The associated federal contract opportunity (Solicitation Number 19M03025Q0003) is a Request for Quotations from the Department of State for a 30 Mbps dedicated internet channel with VPN and internet services. The solicitation includes a base 12-month period with one optional 12-month renewal. A pre-quotation conference is scheduled for April 7 at the Casablanca Consulate, with quotations due by April 11, 2025 at 16:00 local time. Required submission documents include an SF-1449 cover sheet, C-SCRM questionnaire, software producer attestation form, and anti-discrimination form.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
C-SCRM Questionnaire
| CYBERSECURITY SUPPLY CHAIN RISK MANAGEMENT (C-SCRM) QUESTIONNAIRE |
| Instructions: |
- This worksheet shall be completed by the vendor responsible for submitting the offer. References to "organization" refer to the offering entity. If the offering entity is a joint venture (JV), the response may come from either the JV or from the JV managing partner.
- Provide the requested inputs in the gray shaded lines of the template under column D, Vendor Response, for all Items Numbers for Sections 1-3. Offerors are advised that the Government may request documentation from the Offerors to validate the responses provided.
| SECTION 1 - CONTACT INFORMATION | |||
| ITEM NO. | ITEM DESCRIPTION | VENDOR RESPONSE | |
| 1.1 | Enter the name of your company. | ||
| 1.2 | Enter the name of the primary Point-Of-Contact (POC) for your company that the Government may contact to discuss the vendor inputs on this questionnaire. | ||
| 1.3 | Enter the job title of the primary POC. | ||
| 1.4 | Enter the phone number of the primary POC in the following format: (555) 555-5555 | ||
| 1.5 | Enter the e-mail address of the primary POC. | ||
| SECTION 2 VENDOR RISK MANAGEMENT PLAN | |||
| ITEM NO. | ITEM DESCRIPTION | VENDOR RESPONSE | NIST SP 800-53 Reference |
| 2.1 | Does your organization identify its key supply chain threats? (Note: if you do not have suppliers, answer "Yes") | IR-8, SR-7 | |
| 2.2 | Does your organization map key suppliers to your supply chain threats? (Note: if you do not have suppliers, answer "Yes") | IR-8, SR-7 | |
| 2.3 | Does your organization have written SCRM requirements in contracts with your key suppliers? (Note: if you do not have suppliers, answer "Yes") | SA-4 | |
| 2.4 | Does your organization verify that your suppliers meet SCRM requirements through contractual terms and conditions? (Note: if you do not have suppliers, answer "Yes") | SR-6 | |
| SECTION 3 PHYSICAL AND PERSONNEL SECURITY | |||
| ITEM NO. | ITEM DESCRIPTION | VENDOR RESPONSE | NIST SP 800-53 Reference |
| 3.1 | Does your organization have policies for conducting background checks of your employees as permitted by the country in which your organization operates? | PE-2, PE-3 |
PS-3
3.2 Does your organization have procedures in place to prevent tampering of Information and Communications Technology (ICT) equipment stored as supply chain inventory? SR-9
AC-1
3.3 Do you provide literacy training on recognizing and reporting potential indicators of insider threat? AT-2(2)
&"Calibri"&11&K000000_x000D_&1#&"Times New Roman"&10&K000000SENSITIVE BUT UNCLASSIFIED
Data (HIDE)
| Status | Score | Status | Not Reviewed | Yes | No | Not Applicable | Alternative | Total |
| ERROR:#REF! | ERROR:#REF! | Counts | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! |
| Pct | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! | ERROR:#REF! |
&"Calibri"&11&K000000_x000D_&1#&"Times New Roman"&10&K000000SENSITIVE BUT UNCLASSIFIED
Counts Not Reviewed Yes No Not Applicable Alternative 0 0 0 0 0
DL (HIDE)
| GWACS | Pool | Implementation Status | Answer |
| Alliant/ Alliant 2 | Small Business (SB) Pool | Satisfied | Yes |
| Alliant SB | HUBZone SB (HUBZone) Pool | Partially Satisfied | No |
| 8(a) STARS II | Women Owned SB (WOSB) Pool | Not Satisfied | |
| VETS/ VETS2 | Other | Not Applicable | |
| TBD | |||
| Not Reviewed |
&"Calibri"&11&K000000_x000D_&1#&"Times New Roman"&10&K000000SENSITIVE BUT UNCLASSIFIED
File details come from the government source that posted it. Updated .