CALNET Managed Cybersecurity Services IFB

The California Department of Technology, Office of Statewide Technology Procurement, is soliciting bids for the CALNET Managed Cybersecurity Services contract (IFB C5-CMCS-G1-26). This fixed-price procurement aims to establish multiple awards across four key service categories: Managed Multi-Factor Authentication (Category 530), Managed Incident Response Retainer (Category 531), Managed Anti-Phishing Services (Category 532), and Managed Endpoint Detection and Response (Category 533). The contract term is approximately three years, ending June 30, 2029, with the State retaining the option to exercise two one-year extensions. Bidders must adhere to a strict submission process, including a response deadline of September 15, 2026. Proposals are evaluated through a multi-phase process starting with pass/fail gates for administrative and mandatory technical requirements. Qualified bidders are then scored based on a weighted system: 46.5% for mandatory business and technical requirements, 40% for cost, and 13.5% for scorable business and technical requirements. Pricing is based on a capped model using non-recurring and monthly recurring charges, with the lowest total estimated cost serving as the primary cost evaluation metric. Key contractual obligations include providing a 30-day acceptance period for deliverables and submitting monthly service performance SLA reports. Bidders must demonstrate financial stability and may be required to provide performance bonds of $500,000 per category. The procurement also includes socioeconomic incentives for Small Businesses and Disabled Veteran Business Enterprises. All pricing must be contained exclusively within Volume 3 of the proposal to avoid immediate rejection, and all documents must be ADA compliant and formatted according to specific typography and media requirements.