SUPPLY CHAIN RISK ASSESSMENT.docx

SUPPLY CHAIN RISK ASSESSMENT

The IRS will conduct a supply chain risk assessment prior to award of this Contract (including any suppliers, distributors, and manufacturers involved in the awardee’s supply chain). Vendor is to include the following highlighted information (#1-9) with their submitted quote.

1. The identity of the apparent awardee’s parent and/or subsidiary corporate entities.

2. The identity of any proposed suppliers, distributors, and manufacturers involved in its supply chain.

3. The degree of any foreign ownership in or control of the entities identified under (1) and (2) above.

4. Whether the apparent awardee and including, but not limited to; suppliers, distributors, and manufacturers),maintain a formal security program that includes:

a. Personnel security;

b. Information security program;

c. Physical security program;

d. Cyber security program; and

e. Supply chain risk management program.

5. The name and locations of each facility where any information system, information technology hardware and/or software to be delivered under the order was designed, manufactured, packaged and stored prior to distribution.

6. The means and method for delivering any information system, information technology hardware and/or software to be delivered under the order including the names of any entity responsible for transport or storage. This information should address whether the information system, information technology hardware and/or software will be direct shipped to IRS.

7. Whether the proposed information system, information technology hardware and/or software includes a service agreement required by the contract or call order, and if so, the identity of the contractor/subcontractor(s)who will provide this follow-on service, and how the services will be delivered/deployed (e.g., via on-site service, remotely via internet).

8. Address how the potential awardee will solidify their ability to provide needed quantities as it pertains to an ongoing shortage of semiconductor components affecting a wide range of industries including IT, with all major OEMs experiencing rapid fluctuation in both availability and pricing. Please provide an OEM memo to certify the availability of delivery, as stated in this RFQ.

9. IRS will evaluate the information provided, along with any other information available to IRS from any other source, to assess the supply chain risk associated with the apparent awardee’s quote, to determine if the quote presents an unacceptable risk to IRS. Should the apparent awardee’s supply chain risk assessment pose no or an acceptable amount of risk to the government, IRS shall make award to that contractor. If the apparent awardee’s supply chain risk assessment poses an unacceptable risk, the contractor with the next lowest priced quotation will go through the evaluation and assessment. This process will continue until a contractor is found that poses no or an acceptable amount of risk.