PWS_Attach_P.pdf
PDF 77 KB Posted
- Solicitation number
- FA812125R0017
About this file
This document is a Performance Work Statement (PWS) Attachment P for Supply Chain Risk Management (SCRM) Plan dated 05 November 24. The plan requires offerors to submit a comprehensive 10-page SCRM plan addressing three critical areas: Continuity of Operations (COOP), Foreign Influence, and Cybersecurity.
The SCRM plan must detail specific supply chain risk management strategies, including establishing clear communication lines between the offeror and government/subcontractors, ensuring operational continuity, protecting informational and physical assets, managing personnel support, and implementing robust cybersecurity prevention measures. Key requirements include describing facility and operations security, data protection, personnel security clearances, foreign investment monitoring, and comprehensive cybersecurity prevention tactics such as preventing unauthorized system access, countering malware insertion, protecting against data theft, and maintaining system functionality.
View the file
Other files
Show 40 more
50 files listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
T56 PWS Attachment P- Supply Chain Risk Management (SCRM) Plan
05 November 24
1. Submit SCRM Plan
a. Submit a SCRM plan (10 pages maximum) detailing the offeror’s supply chain risk management approach to: a.) Continuity of Operations, b.)
Foreign Influence, and c.) Cybersecurity.
b. The offeror must detail the specific supply chain risk (listed below) and provide a management and mitigation plan identifying how the offeror will ensure Supply Chain Risk Management is effective over the life of the contract.
2. Continuity of Operations (COOP) The Plan must describe:
a. Clear lines of authority and communication between the Offeror and the Government as well as the Offeror and its subcontractors and/or vendors
b. Security management procedures ensuring the protection of informational and physical assets.
c. Deviated work plan to ensure adequate personnel support for continued operational capability
d. Operational capacity to support continued operations to include facilities, equipment, personnel, IT systems, security, vendor support, and others that impact production
e. Contingency measures for continued supply chain logistics and transportation, facilities and business operations, and IT support
3. Foreign Influence The Plan must describe:
a. Facility and operations security
b. Data protection
c. Personnel security clearances & background checks
d. Monitoring (including sub vendors) foreign investment, mergers, acquisitions, and operating locations
4. Cybersecurity
The Plan must describe prevention measures for the following:
a. Unauthorized access to information systems
b. Interruption of communications
c. Insertion of counterfeits/malware
d. Unauthorized data reproduction
e. Tampering and theft
f. Insertion of malicious software and hardware
g. Systems functionality alteration
h. Disruption of operation
File details come from the government source that posted it. Updated .