PWS_Attach_P.pdf

T56 PWS Attachment P- Supply Chain Risk Management (SCRM) Plan

05 November 24

1. Submit SCRM Plan

a. Submit a SCRM plan (10 pages maximum) detailing the offeror’s supply chain risk management approach to: a.) Continuity of Operations, b.)

Foreign Influence, and c.) Cybersecurity.

b. The offeror must detail the specific supply chain risk (listed below) and provide a management and mitigation plan identifying how the offeror will ensure Supply Chain Risk Management is effective over the life of the contract.

2. Continuity of Operations (COOP) The Plan must describe:

a. Clear lines of authority and communication between the Offeror and the Government as well as the Offeror and its subcontractors and/or vendors

b. Security management procedures ensuring the protection of informational and physical assets.

c. Deviated work plan to ensure adequate personnel support for continued operational capability

d. Operational capacity to support continued operations to include facilities, equipment, personnel, IT systems, security, vendor support, and others that impact production

e. Contingency measures for continued supply chain logistics and transportation, facilities and business operations, and IT support

3. Foreign Influence The Plan must describe:

a. Facility and operations security

b. Data protection

c. Personnel security clearances & background checks

d. Monitoring (including sub vendors) foreign investment, mergers, acquisitions, and operating locations

4. Cybersecurity

The Plan must describe prevention measures for the following:

a. Unauthorized access to information systems

b. Interruption of communications

c. Insertion of counterfeits/malware

d. Unauthorized data reproduction

e. Tampering and theft

f. Insertion of malicious software and hardware

g. Systems functionality alteration

h. Disruption of operation