Countywide Self-Assessment and Risk Analysis (SARA)

The Countywide Self-Assessment and Risk Analysis (SARA) contract requires a detailed organizational and technical vulnerability assessment across multiple departments within San Bernardino County, focusing on identifying risks in both operational structures and information systems. The work encompasses full project lifecycle activities including strategic planning, coordination with key stakeholders, systematic data collection, and the delivery of formal, actionable reports that outline identified vulnerabilities and recommended mitigation strategies. The scope demands a thorough understanding of county workflows, cybersecurity posture, and internal governance to ensure the assessment is both comprehensive and relevant to the agency’s operational environment. The contract is classified as a subcontract under NAICS code 541611, indicating it falls within management consulting services, and is being issued by the Finance & Administration division of the State of California. Performance is designated for San Bernardino County with a zip code of 92415-0915, though the physical location of the contractor is not specified. The opportunity was posted on July 2, 2026, with a firm deadline for submissions on August 6, 2026, at 11:00:59 PM Pacific Time. No set-aside status or point of contact information has been provided, and bidders must rely on the official eProcurement link to access solicitation details and requirements.