

Supply Chain Management
Invitations to Bid
A. Low Score and Malicious IP/Domain
It has come to our attention that some of the emails sent by Vendors to the MERALCO BAC Secretariat and Bid Reception email accounts were blocked by MERALCO's email security. This may be due to IP addresses used by vendors having been globally tagged with a bad reputation based on set cybersecurity standards. This means that these IP addresses may have been used for malicious activities. Blocked emails are considered undelivered and the email content is not stored in MERALCO's email platform.
MERALCO employs strict cybersecurity controls, which includes monitoring of emails from bad domain/IP reputation sources. To ensure efficient and smooth handling of email submissions, please ensure that the Vendor implements cybersecurity hygiene practices. If the email domain or IP source has been identified with a history of negative/low reputation score, it is possible that the email may be blocked.
If the Vendor's email administrator receives an undelivered report upon submission of the bid eligibility requirements or bid proposals to the MERALCO BAC Secretariat and Bid Reception email accounts as part of the MERALCO bidding process, kindly contact MERALCO-Supply Chain Management thru Meralco_BAC_Secretariat@meralco.com.ph using a different email account.
B. Compliance of Domain Base Authentication
Our Cyber Security Group has implemented additional email security measures to protect Meralco and its employees against cyber threats such as phishing and spoofing. To ensure smooth and uninterrupted email correspondence, please ensure that you are compliant with the following email security protocols:
1. For email authentication, a Sender Policy Framework (SPF) record must be added in your Domain Name System (DNS) settings to authorize your servers to send emails on your behalf.
2. You must also have a DomainKeys Identified Mail (DKIM) signature to your emails that Meralco’s mail server can verify to ensure the integrity and authenticity of the email.
3. To ensure that your SPF and DKIM settings are working together properly, a Domain-based Message Authentication, Reporting & Conformance (DMARC) policy should be set up to manage unauthenticated emails.
Please be informed that emails that fail to meet these security requirements will be quarantined.
Your cooperation in maintaining the security of our communications is highly appreciated.
CLOUD SECURITY POSTURE MANAGEMENT SUBSCRIPTION (BAC CONTROL NO. IP0625-0541-2) | Read More |
TWO-YEAR SUPPLY OF VARIOUS FUSE CUTOUTS, CURRENT LIMITING FUSES, AND FUSE LINKS (BAC CONTROL NO. CD0625-0551-1) | Read More |
SUPPLY AND INSTALLATION OF TWO (2) BOOSTER PUMPS AT SAN PABLO SECTOR (BAC CONTROL NO. NF0625-0550-1) | Read More |
SUPPLY OF 115KV TERMINATING KITS FOR OUTDOOR APPLICATION (BAC CONTROL NO. CD0625-0558-1) | Read More |
THREE-YEAR REPAIR AND MAINTENANCE OF VIBRATION MONITORING SYSTEM (BAC CONTROL NO. NG0624-0180-4) | Read More |
PURCHASE OF ELECTRIC MOTORCYCLES (BAC CONTROL NO. NG0725-0568-1) | Read More |
REPLACEMENT OF AIR HANDLING UNIT (AHU) AT MERALCO MULTI-PURPOSE HALL (MPH) (BAC CONTROL NO. NF0725-0570-1) | Read More |
SUPPLY AND DELIVERY OF RICE (BAC CONTROL NO. NG0725-0567-1) | Read More |
ENGINEERING, PROCUREMENT, AND CONSTRUCTION (EPC) FOR THE SITE DEVELOPMENT OF ANTIPOLO POWERBASE PROPERTY (BAC CONTROL NO. NF0725-0574-1) | Read More |
REPLACEMENT OF GENERATOR SETS AT VARIOUS MERALCO LOCATIONS (BAC CONTROL NO. NF0725-0569-1) | Read More |
CONSTRUCTION OF VARIOUS BUSINESS CENTERS (BAC CONTROL NO. NF0725-0571-1) | Read More |