Supply Chain Management
Invitations to Bid
A. Low Score and Malicious IP/Domain
It has come to our attention that some of the emails sent by Vendors to the MERALCO BAC Secretariat and Bid Reception email accounts were blocked by MERALCO's email security. This may be due to IP addresses used by vendors having been globally tagged with a bad reputation based on set cybersecurity standards. This means that these IP addresses may have been used for malicious activities. Blocked emails are considered undelivered and the email content is not stored in MERALCO's email platform.
MERALCO employs strict cybersecurity controls, which includes monitoring of emails from bad domain/IP reputation sources. To ensure efficient and smooth handling of email submissions, please ensure that the Vendor implements cybersecurity hygiene practices. If the email domain or IP source has been identified with a history of negative/low reputation score, it is possible that the email may be blocked.
If the Vendor's email administrator receives an undelivered report upon submission of the bid eligibility requirements or bid proposals to the MERALCO BAC Secretariat and Bid Reception email accounts as part of the MERALCO bidding process, kindly contact MERALCO-Supply Chain Management thru Meralco_BAC_Secretariat@meralco.com.ph using a different email account.
B. Compliance of Domain Base Authentication
Our Cyber Security Group has implemented additional email security measures to protect Meralco and its employees against cyber threats such as phishing and spoofing. To ensure smooth and uninterrupted email correspondence, please ensure that you are compliant with the following email security protocols:
1. For email authentication, a Sender Policy Framework (SPF) record must be added in your Domain Name System (DNS) settings to authorize your servers to send emails on your behalf.
2. You must also have a DomainKeys Identified Mail (DKIM) signature to your emails that Meralco’s mail server can verify to ensure the integrity and authenticity of the email.
3. To ensure that your SPF and DKIM settings are working together properly, a Domain-based Message Authentication, Reporting & Conformance (DMARC) policy should be set up to manage unauthenticated emails.
Please be informed that emails that fail to meet these security requirements will be quarantined.
Your cooperation in maintaining the security of our communications is highly appreciated.
| CIVIL WORKS FOR THE REPLACEMENT OF 34.5KV METAL CLAD SWITCHGEAR NO. 1 AT STA. ROSA II SUBSTATION (BAC CONTROL NO. NF0125-0379-1) | Read More |
| CIVIL WORKS FOR THE DEVELOPMENT OF MAPLE GROVE GIS SUBSTATION AND NORZAGARAY CONVENTIONAL SUBSTATION(BAC CONTROL NO. CE0125-0382-1) | Read More |
| CONTRACT FOR PROJECT AND CORPORATE EVENTS SERVICES (BAC CONTROL NO. CS0125-0384-1) | Read More |
| CONSOLIDATED PURCHASE OF UNINTERRUPTIBLE POWER SUPPLY SYSTEM FOR MERALCO BUSINESS CENTERS AND SECTOR OFFICES (BAC CONTROL NO. CE0125-0386-1) | Read More |
| CIVIL WORKS REQUIREMENT FOR THE CONSTRUCTION OF CND-ALAGAO 69KV LINE 3 (ALAGAO STAGE 2) (BAC CONTROL NO. CE0125-0383-1) | Read More |
| REPLACEMENT OF ENVELOPING MACHINES (BAC CONTROL NO. IT0125-0371-2) | Read More |
