RFQ PR12390989 Supply of APPLE MAC PRO.pdf

SBU - CONTRACTING AND ACQUISITIONS

Embassy of the United States of America

Islamabad, Pakistan Date: June 14, 2024 Page 1 to 7

To: Offeror

Request No: PR12390989– Supply of Apple Mac Pro

From: Contracting Officer General Services Office US Embassy, Diplomatic Enclave, Ramna 5, Islamabad.

E-mail: RanaMA@state.gov: AqeelM@state.gov Phone: 92-51-201-5159

Subject: Request for Quotation – Supply of Apple Mac Pro

The US Embassy, Islamabad has an opportunity for the Open Market Contractors to participate in bidding for the “Supply of Apple Mac Pro”. It will be a Firm-Fixed Price Purchase Order.

Bid from all potential offerors will be accepted based on assurance of genuine quality, capability, lead time for delivery and competitive price. You are encouraged to submit your bids before the deadline i.e., June 28, 2024. The vendors dealing in the similar trade are encouraged to participate in this Solicitation.

Note: This is brand specific requirement. No other brand equivalent product shall be acceptable.

1. Items Description

Sr. # Item’s Details Required Quantity

Unit Price in

USD

Total Price in USD

1 Apple Mac Pro with M2 Ultra - BH #APMPM2Z17122 •

MFR #Z171000QM

• Apple M2 Ultra 24-Core CPU

• 192GB of Unified RAM | 2TB SSD

• 76-Core GPU | 32-Core Neural Engine

• 2 x PCIe 4 x16 | 4 x PCIe 4 x8 Slots

• 8 x Thunderbolt 4 Ports

• 2 x 10 Gigabit Ethernet Ports

• Wi-Fi 6E (802.11ax) | Bluetooth 5.3

• Magic Keyboard with Touch ID & Keypad

• Magic Mouse

• macOS

02 Each

2 Estimated transportation & handling charges till NJ, 08902 01-Lump Sum

Grand Total in USD =

2. Quote Submission Due Date:

Quotation must be submitted electronically with subject line "Quotation for RFQ# PR12390989- “Supply of Apple Mac Pro”. Quotations must be received on or before Close of business (COB) Friday, June 28, 2024. No quotation will be accepted after the deadline. Submit your quotations to the following email address: RanaMA@state.gov ; AqeelM@state.gov.

For your quote to be considered, must submit the following documentation: -

Requirements:

Prepare your quotation on your company letterhead in accordance with the requested details of this RFQ.

a. Please include list of your clients, you sold similar items within the last two years.

b. Include below information in bid:

i Delivery Period after receiving of Purchase Order.

ii Bid must be valid for 30 days from the closing date for this solicitation.

iii Acceptance of our Net 30 days Payment terms.

iv Valid DUNS Number and SAM Registration

c. Bidder must have a physical business address and good financial health to get this award.

Provide evidence for business address.

mailto:RanaMA@state.gov

d. Please provide reference of our Request Number PR12390989 in all your correspondence regarding this request for price quotation.

e. The bids are acceptable from CONUS vendors only. The Set Aside Condition is applicable on the OCONUS vendors on this Solicitation.

f. Please note that U.S. Embassy is tax exempted, please submit tax free quote.

g. Go through all the documents in the solicitation and read them very carefully. Your response must be in accordance with the solicitation and have the bid signed by an authorized representative of your company. Otherwise, the proposal may be considered unacceptable and may be rejected.

3. Terms & Conditions:

a) Mode of Payment:

Payment will be processed through EFT within 30 days of the date that a correct invoice conforming to the provisions of the Purchase Order is received at the US Embassy Financial Management Office and satisfactory completion of work/delivery of acceptable items.

b) Delivery Schedule/ Period of Performance:

The delivery is required to be made within 15-25 days after receiving the PO. The vendor will deliver the supplies at New York DA Office, SUVI LLC, 2801 Route 130, Unit 1, North Brunswick, NJ, 08902. Must call our warehouse 3 days prior to shipping for a delivery appointment (571) 482-5289. Operating hours are from Monday thru Fridays 7:30am until 3:30pm, closed for lunch from 12:00pm until 12:45pm.

c) Inspection & Acceptance:

A Government representative will inspect the items at the time of delivery or later to determine the quality, acceptability and payment shall be released accordingly. Any item found with change in Specs, Quality, Brand shall be returned to the vendor without entertaining the payment claim.

4. FAR/ DOSAR Clauses applies on this Solicitation:

FAR & DOSAR (attached) clauses will apply to this Procurement. These clauses can be accessed through following link:

FAR 52.252-2 Clauses Incorporated by Reference (FEB 1998)

This purchase order or BPA incorporates the following clauses by reference, with the same force and effect as if they were given in full text. Upon request, the Contracting Officer will make their full text available. Also, the full text of a clause may be accessed electronically at this address: https://www.acquisition.gov/far https://www.acquisition.gov/far

DOSAR clauses may be accessed at: http://www.statebuy.state.gov/dosar/dosartoc.htm

FEDERAL ACQUISITION REGULATION (48 CFR Chapter 1) CLAUSES

NUMBER TITLE DATE

52.204-7 SYSTEM FOR AWARD MANAGEMENT OCT 2018

52.204-9 Personal Identity Verification of Contractor Personnel (if contractor requires physical access to a federally controlled facility or access to a federal information system)

JAN 2011

52.204-13 SYSTEM FOR AWARD MANAGEMENT

MAINTENANCE

OCT 2018

52.204-18 COMMERCIAL AND GOVERNMENT ENTITY CODE

MAINTENANCE

JUL 2016

52.212-4 Contract Terms and Conditions – Commercial Items (Alternate I (MAY 2014) of 52.212-4 applies if the order is time-and-materials or labor-hour)

OCT 2018

52.225-19 Contractor Personnel in a Diplomatic or Consular Mission Outside the United States (applies to services at danger pay posts only)

MAY 2020

52.227-19 Commercial Computer Software License (if order is for software)

DEC 2007

52.228-3 Workers’ Compensation Insurance (Defense Base Act) (if order is for services and contractor employees are covered by Defense Base Act insurance)

JUL 2014

52.228-4 Workers’ Compensation and War-Hazard Insurance (if order is for services and contractor employees are not covered by Defense Base Act insurance)

APR 1984

52.244-6 UBCONTRACTS FOR COMMERCIAL ITEMS NOV 2020

52.246-26 REPORTING NON-CONFORMING ITEMS JUN 2020

Cybersecurity Supply Chain Risk Management Requirements (FEB 2023)

(a)Definitions. As used in this clause:

Covered article - The term "covered article" includes- (1)"Information and Communications technology" which means-

(i)any equipment or interconnected system or subsystem of equipment, used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the executive agency, if the equipment is used by the executive agency directly or is used by a contractor under a contract with the executive agency that requires the use of that equipment, http://www.statebuy.state.gov/dosar/dosartoc.htm or of that equipment to a significant extent in the performance of a service or the furnishing of a product.

(ii)computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services), and related resources; however, does not include any equipment acquired by a federal contractor incidental to a federal contract.

(2)"Telecommunications Equipment", which means equipment, other than customer premises equipment, used by a carrier to provide telecommunications services, and includes software integral to such equipment (including upgrades).

(3)"Telecommunications Service", which means the offering of telecommunications for a fee directly to the public, or to such classes of users as to be effectively available directly to the public, regardless of the facilities used.

(4)“Cybersecurity Supply Chain Risk”, which means the risk that a person may sabotage, maliciously introduce unwanted function, extract data, or otherwise manipulate the design, integrity, manufacturing, production, distribution, installation, operation, maintenance, disposition, or retirement of covered articles to surveil, deny, disrupt, or otherwise manipulate the function, use, or operation of the covered articles or information stored or transmitted on the covered articles.

(b)Contractor Cybersecurity Supply Chain Risk Management Responsibilities. The Contractor shall take all prudent actions and comply with all Government direction (as identified in paragraph (c)) to regularly identify, assess, monitor, and mitigate cybersecurity supply chain risks when providing covered articles or services affecting covered articles to the Government.

The Contractor shall maintain artifacts that document its compliance with this paragraph and shall provide these artifacts to the Government within 48 hours of request.

(c) Supporting Government Cybersecurity Supply Chain Risk Assessments. The Government may perform a cybersecurity supply chain risk assessment at any time during contract administration to identity, assess, and monitor the cyber risks of the Contractor’s supply chain.

The Contractor agrees that the Government may, at its own discretion, perform on-site assessments to collect information for the cybersecurity supply chain risk assessment. In performing the cybersecurity supply chain risk assessment, the Government may review any information provided by the Contractor, along with any other information available to the Government from public, unclassified, classified, or any other sources. Examples of information that the Government may collect for the cybersecurity supply chain risk assessment includes the following:

1. Functionality and features of covered articles, including access to data and information system privileges.

2. The user environment where a covered article is used or installed.

3. The ability of a source to produce and deliver covered articles as expected.

4. Foreign control of, or influence over, a source or covered article (e.g., foreign ownership, personal and professional ties between a source and any foreign entity or legal regime of any foreign country in which a source is headquartered or conducts operations).

5. Implications to Government mission(s) or assets, national security, homeland security, or critical functions associated with use of a source or covered article.

6. Vulnerability of Federal systems, programs, or facilities.

7. Market alternatives to the covered source.

8. Potential impact or harm caused by the possible loss, damage, or compromise of a product, material, or service to an organization’s operations or mission.

9. Likelihood of a potential impact or harm, or the exploitability of a system.

10. Security standards of the supplier as demonstrated by cooperation with assessments.

11. Security, authenticity, and integrity of covered articles and their supply and compilation chain.

12. Capacity to mitigate risks identified.

13. Factors that could lead to inability of the supplier to provide security updates.

14. Factors that may reflect upon the reliability of other supply chain risk information.

15. Any other considerations that would factor into an analysis of the security, integrity, resilience, quality, trustworthiness, or authenticity of covered articles or sources.

(d) Non-Destructive and Destructive Testing. The Government may engage in non-destructive and/or destructive testing of any information system, equipment, and software to determine whether it will negatively affect the security or performance of a Department of State information system.

(e) Novation Agreement Notice. FAR 42.1203 require Government approval of novation agreements. For proposed novation agreements for this contract, the Contractor shall provide any information requested by the Government regarding the proposed successor’s identity and information regarding its supply chain.

(f) Software Bill of Materials (SBOM) Requests. For software, within 10 business days of request by a Department of State representative, the Contractor shall submit a SBOM to a designated representative. This request may be requested on one (1) or more occasions and shall be delivered at no increase in contract price.

(g) SBOM Sharing Notice. The Contractor consents to the sharing of its SBOM data with other contractors, such as tool solution providers, for the sole purpose of mapping against known vulnerabilities.

(h) Notification procedures for cybersecurity supply chain events. When cybersecurity supply chain events occur, the Contractor must contact the Contracting Officer or his/her designee within 12 hours of the event.

(i) Subcontracts. The Contractor shall insert the substance of this clause in all subcontracts and other contractual instruments in support of this contract.

(j) Vulnerability Exploitability eXchange (VEX). The Contractor is required to notify the Department of any discovered software vulnerabilities within 12 hours. Within three (3) days, they shall provide a report using a VEX format.

(k) Attestation following Major Version Change. Critical Software, as defined by National Institute for Science and Technology (NIST) Guidance, that is provided by the Contractor or subcontractors and is modified during the contract’s period of performance by a major version change (e.g., using a semantic versioning schema of Major.Minor.Patch, the software version number goes from 2.5 to 3.0) requires a new self-attestation. For indefinite delivery contract vehicles, this self-attestation must be provided for all critical software available for ordering on the contract vehicle when the software is modified during the contract vehicle’s ordering period of performance by a major version change. The Contractor shall either (i) post the new attestation in a publicly available internet location within 15 days of the major version change and provide the COR, or Contracting Officer if a COR is not appointed, with the internet link or

(ii) shall contact the COR, or Contracting Officer if a COR is not appointed, and request the agency’s current software self-attestation form and submit it to the Government within 15 days of the major version change. The self-attestation form will contain the following elements: (i) the software producer's name; (ii) a description of which product or products the statement refers to including the number of the major version change; and (iii) a statement attesting that the software producer follows secure development practices and tasks consistent with NIST Guidance.

(end of clause)

5. EVALUATION CRITERIA:

The award will be made to the Lowest Price Technically Acceptable vendor, who can meet the delivery schedule, salient physical, functional and performance characteristics.

_________________________________(End)___________________________________