Software License Subscriptions Renewal

Questions & Answers / Clarifications

This document provides answers to vendor questions regarding Solicitation No. 19TH2026Q0018 for Software License Subscriptions Renewal.

• Inclusion of Teams: The Embassy in Bangkok requires Microsoft 365 E5 subscriptions to include Teams Enterprise.
• Procurement Routing: This purchase is for non-DOS network use and will be part of a joint program with the Royal Thai Government, thus it is not being routed through the DOS's agency-wide enterprise agreement.

Bidders should ensure their quotations for Microsoft 365 E5 subscriptions include Teams Enterprise. The clarification also explains the rationale for the procurement not utilizing the existing DOS enterprise agreement.

Form / Attachment / Pricing Sheet

This document is a Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire that vendors must complete. It requires vendors to provide specific information regarding their organization's practices related to identifying and managing supply chain threats, contractual requirements for suppliers, and physical/personnel security measures. The government may request documentation to validate the provided responses.

Section 1 - Contact Information: Requires the vendor's company name, primary Point-of-Contact (POC) name, job title, phone number, and email address.

Section 2 - Vendor Risk Management Plan: Asks about the organization's practices for identifying key supply chain threats, mapping suppliers to these threats, and implementing written C-SCRM requirements in supplier contracts. It also inquires about verifying supplier compliance through contractual terms.

Section 3 - Physical and Personnel Security: Inquires about policies for employee background checks, procedures to prevent tampering of Information and Communications Technology (ICT) equipment in supply chain inventory, and training on recognizing and reporting insider threats.

Vendors must complete this questionnaire accurately as part of their offer submission. The responses will likely be evaluated as part of the overall risk assessment for the vendor's organization and its supply chain. Failure to provide complete or satisfactory responses may impact the evaluation of the offer.

Solicitation / RFP / RFQ

This Request for Quotations (RFQ) is for a one-year renewal of Microsoft 365 E5 with Teams Enterprise license subscriptions for the U.S. Embassy Bangkok. The government intends to award a purchase order to the responsible company offering the lowest price, potentially without discussions.

• Renewal of one-year Microsoft 365 E5 with Teams Enterprise license subscriptions.

• Completion of upgrade and renewal by March 30, 2026, at 3:00 PM (Bangkok local time).

• Provision of genuine software licenses valid for use in Thailand.

• Detailed instructions and support for license activation.

• No credential sharing by the government.

• Potential on-site assistance for activation and support.

• Delivery to the International Law Enforcement Academy (ILEA), U.S. Embassy Bangkok.

• This is a firm-fixed price type of purchase order.

• The period of performance is one year.

• Quotations are due by March 16, 2026, at 4:00 PM (Bangkok local time).

• Questions regarding the solicitation are due by March 10, 2026, at 12:00 PM (Bangkok local time).

• Submissions must be electronic, in Adobe Acrobat (pdf) format, and not exceed 25MB per file.

• Award will be made to the lowest priced, acceptable, responsible quoter.

• Evaluation will include an initial review for completeness and compliance, including a Cybersecurity Supply Chain Risk Management (C-SCRM) Go/No-Go factor.

• Past performance will be used to assess capability, credibility, and responsibility.

• Offerors must be registered in the System for Award Management (SAM.gov) prior to submission.

• Offerors must be an established business with a permanent address in Thailand.

• Offerors must provide proof of SAM registration and be an authorized distributor or partner of Microsoft.

• The SF-1449 form is the primary document for the solicitation.

• Value Added Tax (VAT) is not applicable.

• Offerors must submit SF-1449, Section 1 (Pricing), Section 5 (Representations and Certifications), additional information as required in Section 3, and proof of SAM registration.

• Attachment 1: Cybersecurity Supply Chain Risk Management (C-SCRM) Questionnaire must be completed.