PWS_Attach_I_Supply Chain Risk Management (SCRM).pdf
PDF 117 KB Posted
- Solicitation number
- FA812126R0010
About this file
This is a Performance Work Statement attachment requiring offerors to submit a Supply Chain Risk Management (SCRM) Plan as part of the T56 contract proposal.
The SCRM Plan must not exceed 10 pages and must address three primary risk areas: Continuity of Operations (COOP), Foreign Influence, and Cybersecurity. Under COOP, offerors must detail clear lines of authority and communication with the Government and subcontractors/vendors, describe security management procedures for informational and physical assets, provide a deviated work plan for continued personnel support, document operational capacity across facilities, equipment, personnel, IT systems, security, and vendor support, and establish contingency measures for supply chain logistics, transportation, facilities, and IT support. For Foreign Influence, the plan must describe facility and operations security, data protection mechanisms, personnel security clearances and background checks, and monitoring procedures for foreign investment, mergers, acquisitions, and operating locations including subvendors. The Cybersecurity section requires prevention measures addressing eight specific threat categories: unauthorized access to information systems, interruption of communications, insertion of counterfeits/malware, unauthorized data reproduction, tampering and theft, insertion of malicious software and hardware, systems functionality alteration, and disruption of operations. Offerors must provide both management and mitigation plans demonstrating how Supply Chain Risk Management will remain effective throughout the contract period.
View the file
Other files
Show all 42
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
T56 PWS Attachment I- Supply Chain Risk Management (SCRM) Plan
05 November 24
1. Submit SCRM Plan
a. Submit a SCRM plan (10 pages maximum) detailing the offeror’s supply chain risk management approach to: a.) Continuity of Operations, b.)
Foreign Influence, and c.) Cybersecurity.
b. The offeror must detail the specific supply chain risk (listed below) and provide a management and mitigation plan identifying how the offeror will ensure Supply Chain Risk Management is effective over the life of the contract.
2. Continuity of Operations (COOP) The Plan must describe:
a. Clear lines of authority and communication between the Offeror and the Government as well as the Offeror and its subcontractors and/or vendors
b. Security management procedures ensuring the protection of informational and physical assets.
c. Deviated work plan to ensure adequate personnel support for continued operational capability
d. Operational capacity to support continued operations to include facilities, equipment, personnel, IT systems, security, vendor support, and others that impact production
e. Contingency measures for continued supply chain logistics and transportation, facilities and business operations, and IT support
3. Foreign Influence The Plan must describe:
a. Facility and operations security
b. Data protection
c. Personnel security clearances & background checks
d. Monitoring (including sub vendors) foreign investment, mergers, acquisitions, and operating locations
4. Cybersecurity
The Plan must describe prevention measures for the following:
a. Unauthorized access to information systems
b. Interruption of communications
c. Insertion of counterfeits/malware
d. Unauthorized data reproduction
e. Tampering and theft
f. Insertion of malicious software and hardware
g. Systems functionality alteration
h. Disruption of operation
File details come from the government source that posted it. Updated .