Description
The State of California, through its Department of Technology, is seeking bids for the CALNET Managed Cybersecurity Services contract (IFB C5‑CMCS‑G1‑26). The contract will award up to four separate managed‑service categories—Multi‑Factor Authentication (MFA), Incident Response Retainer (IRR), Anti‑Phishing Security (MAPS), and Endpoint Detection & Response (EDR)—each to be priced independently and awarded on a best‑value basis. Bidders must submit a full eVAQ qualification, extensive administrative documentation, and meet stringent service‑level agreements covering availability, provisioning, and performance credits. The base contract term is three years with two optional one‑year extensions, and the State will enforce a ceiling price defined in the cost workbooks.
• Four distinct managed‑security service categories (530‑533) are scoped, each with its own technical SOW, Catalog A price tables, and Cost Workbook.
• Mandatory compliance includes eVAQ approval, $500 k bondability/line‑of‑credit, extensive reporting (CBAR, SLA reports), and a 24×7 support requirement.
• The solicitation is open for bids from June 30 2026, with questions due July 27 2026 and final bid submission by October 5 2026; award expected around November 2026.