DTSPO Broadband Circuit 12 months from 1May26 to 30Apr27

Solicitation / RFP / RFQ

This Request for Quotations (RFQ) seeks proposals for a Dedicated Internet Access (DIA) circuit for the U.S. Embassy in Oman. The U.S. Government intends to award a firm-fixed-price contract for a 12-month period.

• Service: Dedicated Internet Access (DIA) circuit.

• Location: U.S. Embassy Oman.

• Period of Performance: 1 May 2026 to 30 April 2027.

• Bandwidth: Minimum 150 Mbps, with the ability to adjust between 64 kbps and 15 Mbps with 30 days' notice.

• Connectivity: Fiber optic, terrestrial connectivity preferred. Must provide a minimum of four public internet routable addresses (CIDR/29 subnet).

• Availability: "Always on" service with 24/7 availability and unlimited usage.

• Performance Standards:

  • Packet Loss: <= 0.5%
  • Availability: 99.9%
  • Latency: < 50 milliseconds for Embassy users.
  • No data caps or throttling.

• Network Devices: Must not use ZTE, Huawei, Xiaomi, or affiliated branded products.

• Service Support: 7x24x365 on-site support required if necessary.

• Cybersecurity: Offerors must complete a C-SCRM Questionnaire and C-SCRM Software Producer Attestation Form.

• Contract Type: Firm-fixed-price purchase order.

• Period of Performance: 12 months from 1 May 2026 to 30 April 2027.

• Value Added Tax (VAT): Not included in CLIN rates; priced as a separate line item.

• Quotation Due Date: April 9, 2026.

• Technical Questions Due: March 31, 2026, 1400hrs GST.

• Submission Method: Electronically to MuscatProcurement@state.gov.

• Evaluation: The Government will conduct a comparative evaluation based on technical acceptability, past performance, and price, seeking the best value. A Go/No-Go evaluation will be performed for the C-SCRM requirements.

• Offerors are not required to be SAM registered at the time of submission but must complete Offeror Identification information.

• Proposals must be in English and incomplete proposals will not be accepted.

• The document includes numerous Federal Acquisition Regulation (FAR) and Department of State Acquisition Regulation (DOSAR) clauses that bidders must comply with.

Form / Attachment / Pricing Sheet

This document contains two Excel worksheets: a "C-SCRM Questionnaire" and a "Software Producer Attestation Form." Both are designed to collect information related to Cybersecurity Supply Chain Risk Management (C-SCRM).

C-SCRM Questionnaire:

• Requires vendors to provide contact information (company name, POC details).
• Asks about the organization's vendor risk management plan, including identification of supply chain threats, mapping suppliers to threats, policies for checking SAM.gov exclusion records, and contractual requirements for key suppliers.
• Inquires about physical and personnel security policies, including background checks, prevention of ICT equipment tampering, and insider threat awareness training.

Software Producer Attestation Form:

• To be completed by each software producer supplying critical software.
• Requires attestation to following secure development practices and tasks as defined by NIST SP 800-218.
• If full attestation is not possible, vendors must identify non-compliant practices and provide a Plan of Action & Milestones (POA&M) for achieving compliance.
• Requires identification of the specific software product(s) the attestation applies to.

Vendors must complete and submit these forms as part of their offer. The questionnaire assesses the vendor's C-SCRM practices, while the attestation form is crucial if the vendor or its subcontractors are providing critical software, requiring adherence to NIST guidelines for secure software development. Failure to provide required information may impact the offer.