4th Qtr. Kosher Requirement FY26

The Federal Bureau of Prisons at Federal Correctional Institution Bennettsville, South Carolina, is soliciting quotes for quarterly kosher food deliveries under solicitation 15B31726Q00000017, with a firm-fixed price contract type and a total small business set-aside. The requirement includes kosher parve fish fillet meals and kosher meat beans and franks meals, along with other kosher food items, to be delivered on or around July 1, 2026, with ongoing quarterly deliveries throughout the fiscal year. All items must be individually packaged with a recognized Orthodox kosher certification such as OU or OK, labeled with the first ingredient, product identification, and compliance with specified CID standards, and maintained at strict temperature controls—non-frozen perishables at 34°F to 41°F and frozen items at 0°F or below, with thawed products subject to rejection. The solicitation, posted on SAM.gov on May 6, 2026, is restricted to small businesses, and offers must be submitted by May 22, 2026, at 4:00 p.m. Eastern Time via email or hand delivery to the specified point of contact. Eligibility requires current SAM registration, completion of representations and certifications via ORCA, and provision of a Unique Entity ID (UEI). Evaluation is strictly Lowest Price Technically Acceptable, where failure to meet religious, packaging, temperature, or labeling requirements results in automatic exclusion regardless of price. The award is anticipated for June 24, 2026, with payment made via Electronic Funds Transfer or Government Purchase Card. Contractors must comply with extensive Department of Justice security and privacy requirements, including implementing NIST SP 800-53 controls, using HSPD-12 compliant multifactor authentication for personnel, signing NDAs and DOJ IT Rules of Behavior, and undergoing annual cybersecurity and privacy training. All systems handling DOJ information must maintain an Authorization to Operate, encryption of PII using FIPS 140-2 compliant methods, continuous monitoring, and baseline configurations, while prohibiting use of unapproved contractor-owned devices. Contractors are required to develop and submit a Cyber Supply Chain Risk Management Plan, flow down all security obligations to subcontractors and cloud providers, and report any actual or suspected security incident or PII breach to the DOJ Security Operations Center and Contracting Officer within one hour, with a written report within 24 hours. Incident