Texas Networks Operational Maneuver

The Texas Cyber Command is soliciting vendor responses under solicitation number 371-00014 to establish operational maneuver capabilities on Texas government networks, focusing on deploying a cybersecurity detection and response system that integrates with existing infrastructure and meets rigorous performance and compliance standards. The contract requires vendors to submit a comprehensive proposal including Exhibit A for vendor certifications and demographics, Exhibit B detailing history and experience, Exhibit F outlining the proposed solution, Exhibit G for HUB subcontracting plans, a Pricing Schedule, vendor references, a release of liability, and a main offer file named Offer.pdf. Proposals must be submitted electronically to txcc.procurement@txcc.texas.gov by May 28, 2026, at 3:00 PM Central Time, with all responses structured according to the RFO's specified formats and templates to avoid disqualification. The contract performance is confined to the state of Texas, with all data residency requirements mandating that telemetry, backups, and operational data be stored, processed, and accessed exclusively within the contiguous United States by U.S. citizens residing in the U.S., and all vendor personnel must be U.S. citizens undergoing background checks compliant with CJIS or equivalent standards. Award will be determined through a best-value trade-off process, evaluating proposals based on three equally weighted criteria: technical requirements (40%), vendor qualifications (30%), and pricing (30%). Technical evaluation emphasizes solution quality, threat detection capability, latency impact, scalability, and successful acceptance testing outcomes, while vendor qualifications consider past performance via the Vendor Performance Tracking System, financial stability, and capability to deliver ongoing support. Pricing must reflect cost-effectiveness but is not the deciding factor, and the agency explicitly rejects a lowest price technically acceptable approach. Mandatory pass/fail criteria include financial solvency verification, completion of the Hardware/Software Profile, compliance with specific Texas Government Code sections, and adherence to WCAG 2.0 AA accessibility standards. Contract terms require strict adherence to TX-RAMP, NIST 800-88 for data sanitization, and cybersecurity training for staff, with no assignment allowed without prior approval. The contract includes an option to extend performance up to 180 calendar days through 30-day written notice, and final payment is contingent upon full return of all materials and successful transition. Cloud solutions must be hosted in TX-RAMP Level 2 or FedRAMP Moderate environments, and TLS inspection authority remains with TXCC with selective decryption permitted only for non-regulated traffic.