RFQ 19MU3026Q0016 MCT-DTO-VNET Dedicated Internet Access

The U.S. Embassy in Muscat, under the Department of State, is soliciting quotations for a dedicated fiber broadband circuit service to be provided from July 1, 2026, through June 30, 2027, with installation required within 60 days of contract award. The service must deliver a minimum guaranteed bandwidth of 70 Mbps, with offerors able to propose higher tiers of 150 Mbps, 200 Mbps, or 250 Mbps, all for a 12-month term. Performance standards include 99.7% monthly uptime, latency under 50 milliseconds, packet loss under 0.5%, and a technical response time of no more than one hour after incident notification, with no data caps or throttling allowed. The contract is not subject to any small business set-aside and is managed under the Federal Acquisition Regulation with clause requirements covering whistleblower rights, PII protection, debarment status, prompt payment, cybersecurity supply chain risk management, and foreign contractor cost allowances. Offerors must submit a complete quotation via email to [email hidden] by June 4, 2026, at 19:59 UTC, and include mandatory documentation such as the Cyber Supply Chain Risk Management Questionnaire, Software Producer Attestation Form in Excel format, proof of SAM registration with a Unique Entity Identifier and CAGE code, past performance references, security documentation, SLA, and evidence of organizational responsibility including financial resources and local presence in Oman. Evaluation is based on a best-value approach under FAR 13, where compliance with mandatory C-SCRM requirements serves as a disqualifying pass/fail gate, followed by assessment of technical acceptability, past performance, and price reasonableness without formal weighting. The Government will conduct acceptance testing at the embassy location in Oman and requires contractors to adhere to NIST SP800-161, SP800-181, and SP800-218 standards for software packaging, integrity verification, labeling, and lifecycle management. Additional obligations include submitting an IT Security Plan within 30 days of award, achieving full system accreditation within six months, providing a Software Bill of Materials and VEX reports upon request, and immediately reporting any cybersecurity supply chain incident within 12 hours. Invoices must be submitted electronically to [email hidden] with VAT itemized separately, referencing SF-1449 Block 1