This document outlines a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire for vendors, part of a federal government RFP. It is divided into three sections: Contact Information, Vendor Risk Management Plan, and Physical and Personnel Security. The questionnaire requires vendors to provide company and primary point-of-contact details. It then assesses their C-SCRM capabilities, asking if they identify and map supply chain threats, have written SCRM requirements in contracts, and verify supplier compliance, referencing NIST SP 800-53 standards. The final section evaluates physical and personnel security, querying policies for employee background checks, procedures to prevent ICT equipment tampering, and insider threat literacy training. The instructions emphasize that the offering entity, or its managing partner if a joint venture, must complete the worksheet, noting that the Government may request documentation to validate responses.
The American Embassy in Tbilisi, Georgia, has issued Solicitation Number 19GG8026Q0004, an RFQ for Cell Phone Communication Services. The solicitation was issued on November 10, 2025, with an offer due date of January 19, 2026, at 16:00 local time. This acquisition is unrestricted. The embassy will administer the contract and receive deliveries at its location in Tbilisi. Payment will be made by the American Embassy Tbilisi, with invoices submitted to tbilisifmovouchering@state.gov. The contract incorporates FAR 52.212-1 and 52.212-4 by reference, with FAR 52.212-3 and 52.212-5 attached.
The U.S. Embassy Tbilisi is seeking quotations for Cell Phone Communication Services, with proposals due by January 20, 2025. The contract will be for one year with two option years, requiring a minimum of 50 and a maximum of 800 plan subscriptions. Services include SIM cards, calls within Georgia and internationally, international roaming, high-speed internet (4G, LTE or better), SMS, voicemail, 24-hour customer service, and detailed billing. Key requirements include 90% network coverage in Georgia, international connectivity, immediate notification of roaming charge thresholds, and specific quality of service criteria (e.g., 99.9% network uptime, 98% call success rate, 10 Mbps download speed). Proposers must be SAM registered and complete specific forms, including a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire. Notably, devices or services from ZTE, Huawei, and Xiaomi are prohibited. Invoices will be paid monthly in local currency via EFT, and VAT is not applicable.