Cell Phone Service U.S. Embassy Tirana

Form / Attachment / Pricing Sheet

This document provides instructions for completing the Department of State's Secure Software Development Attestation Form. The form is used to provide Federal Government assurances that software is securely developed, aligning with Executive Order 14028 and related OMB Memoranda (M-22-18, M-23-16).

• Authority: Cites 44 U.S.C. § 3554, E.O. 14028, and OMB Memos M-22-18/M-23-16.
• Purpose: To collect information from vendor employees attesting to secure software development practices.
• Background: Explains the context of E.O. 14028 and NIST Guidance (SSDF) for software supply chain security.
• Attestation Trigger: Software developed after September 14, 2022, modified significantly after that date, or delivered via continuous changes requires attestation.
• Exclusions: Software developed by Federal agencies, freely obtained open-source software, third-party components, and freely available public software are excluded.
• Attestation Requirements: Details minimum secure development practices related to secure environments, trusted source code supply chains, provenance, and vulnerability checking.
• Submission: Instructions for online submission or PDF submission with specific naming conventions are provided.
• Signatory: The form must be signed by the CEO or a designee with authority to bind the corporation, or by a certified Third Party Assessor Organization (3PAO).

Vendors providing software to the Department of State may be required to complete and submit this attestation form. It outlines the specific secure software development practices that must be adhered to. Failure to provide the requested information may result in the agency no longer utilizing the software. Bidders should review the requirements carefully to ensure compliance.

Solicitation / RFP / RFQ

This Request for Quotations (RFQ) seeks proposals for cell phone services for the U.S. Embassy in Tirana, Albania. The U.S. Government intends to award a contract to the responsible offeror representing the best value through comparative evaluation.

• Provision of mobile telephone services including local and international calls, international roaming, local and roaming data services, SMS messaging, voicemail, and 24-hour customer service.

• Services must ensure high-quality, uninterrupted network connection.

• Specific requirements include 4G/5G data coverage across Albania, international connectivity, e-SIM compatibility, and detailed monthly data usage reports.

• The contract will cover approximately 220 lines for official use, with the option to extend benefits to family members and locally employed staff under separate agreements.

• The contract will have a one-year base period with two one-year options to renew.

• Minimum order amount is $1000; maximum order amount is $230,000.

• Quotations are due by January 26, 2026, at 16:30 (Tirana local time).

• Submissions must be in English and sent electronically to TiranaBids@state.gov in MS-Word, MS-Excel, or Adobe Acrobat format (max 30MB per file).

• Required submission documents include SF-1449, Section I (Pricing), Section 5 (Representations and Certifications), IRS Form W-14, proof of SAM registration, and Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire and Attestation Form.

• Award will be based on a comparative evaluation of technical merit, past performance, and price, not solely on lowest price technically acceptable.

• Offerors must be registered in the System for Award Management (SAM) prior to submission.

• Offerors must demonstrate operation of an established business in Albania or plans to establish an office within 30 days of award.

• Value Added Tax (VAT) is not included in CLIN rates and will be priced as a separate line item (20%).

• The contract requires the contractor to provide a Project Manager fluent in English and Albanian.

Solicitation / RFP / RFQ

This document is a solicitation (RFQ) for Cell Phone Services for Fiscal Year 2026. The U.S. Embassy Tirana is seeking to procure these services.

• Cell Phone Services for FY 2026.

• Specific details regarding the services, quantities, and units are to be found in the attached schedule (referenced as "see attached").

• The contract will include a Base Year and two (2) Option Years.

• Period of Performance:

  • Base Year: March 1, 2026 - February 28, 2027
  • Option Year 1: March 1, 2027 - February 29, 2028
  • Option Year 2: March 1, 2028 - February 28, 2029

• Offer Due Date: January 26, 2026, at 16:30 local time.

• The solicitation is a Request for Quote (RFQ).

• Offerors are required to complete blocks 12, 17, 23, 24, and 30 on the SF1449 form.

• FAR 52.212-1, 52.212-4, and 52.212-5 are incorporated by reference and attached.

• This acquisition is marked as "UNRESTRICTED".

• The solicitation number is 19AL6026Q0003.

• The issuing office is U.S. Embassy Tirana, Albania.

• Contact for solicitation information: Saimira Haxhi – Haxhis@state.gov.

• Standard Form 1449 is the primary document for this solicitation.

Form / Attachment / Pricing Sheet

This document is a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire designed to gather information from vendors regarding their C-SCRM practices. Vendors are required to complete the gray shaded cells in the 'Vendor Response' column for Sections 1-3. The government may request documentation to validate these responses.

• Section 1: Contact Information: Requires the vendor's company name, primary Point-of-Contact (POC) name, job title, phone number, and email address.
• Section 2: Vendor Risk Management Plan: Asks about the organization's practices for identifying supply chain threats, mapping suppliers to these threats, and having written C-SCRM requirements in supplier contracts. It also inquires about verifying supplier compliance with C-SCRM requirements.
• Section 3: Physical and Personnel Security: Inquires about policies for employee background checks, procedures to prevent tampering of Information and Communications Technology (ICT) equipment in supply chain inventory, and insider threat awareness training for employees.

This questionnaire is critical for bidders to complete accurately as it assesses their cybersecurity and supply chain risk management capabilities. The responses provided will likely be a factor in the government's evaluation of the vendor's ability to meet security requirements. Failure to provide complete and accurate information may impact the bid.

Form / Attachment / Pricing Sheet

This document is a job aid providing instructions and frequently asked questions (FAQs) for using the Cybersecurity and Infrastructure Security Agency’s (CISA) Repository for Software Attestations and Artifacts (RSAA). It details the process for software producers to submit a completed Secure Software Development Attestation Form, which is required by the Department of State for all software suppliers selling software, licenses, or keys to the department. This form attests that coding standards meet minimum secure software development requirements.

• Account Setup: Instructions for navigating the RSAA web page, requesting and setting up a user account (Federal User), and logging in.
• Software Record Creation: Steps to create a new software record, including fields for product name, version, producer, and release date.
• Software Record Management: How to locate, search, filter, sort, and associate software records with an agency.
• Attestation Upload: Procedures for uploading attestations, including selecting the software producer, providing a description, associating software records, and optionally uploading artifacts (e.g., FedRAMP assessments).
• Artifact Upload: Guidance on uploading supplemental forms or artifacts.
• Editing Records: Instructions for editing software records, attestations, and artifacts.
• Deletion Policy: Note that attestations and artifacts cannot be deleted once uploaded.

This job aid is crucial for any software supplier intending to sell software to the Department of State. It outlines the mandatory process for submitting the Secure Software Development Attestation Form via the RSAA system. Bidders must understand these procedures to ensure compliance and successful submission of required documentation, which is a prerequisite for selling software to the department.