City of East Palo Alto vCISO Support Services RFP 2026
City of East Palo AltoCity · East Palo Alto, CA- Due
- Aug 26, 2026
- Deadline passed
- Posted
- Jul 29, 2026
- Contract term
- 5 years
- Primary contact
- Jimmie Tulabing
The 30-second brief
The City of East Palo Alto is soliciting proposals for a five-year contract to provide virtual Chief Information Security Officer (vCISO) services, including governance, risk assessment, and policy management. Proposals are due August 26, 2026.
Cybersecurity governance program, Risk assessments, Cybersecurity policies, Incident Response Plan, Business Continuity Plan, Security Governance Meeting agendas and reports, Baseline maturity assessments, Prioritized sequencing matrix, Current and target-state diagrams
Approach (20 points), Firm and Team Qualifications (40 points), Cost Proposal (20 points), Responsiveness and Deliverables Quality (20 points)
Hear what East Palo Alto plans next before it's posted.
Get alerts freeFree account · 30-second setup · No credit card
Summary
The City of East Palo Alto is soliciting proposals for a five-year contract to provide virtual Chief Information Security Officer (vCISO) services, including governance, risk assessment, and policy management. Proposals are due August 26, 2026.
EVALUATION CRITERIA
REQUIRED DELIVERABLES
9- Cybersecurity governance program
- Risk assessments
- Cybersecurity policies
- Incident Response Plan
- Business Continuity Plan
- Security Governance Meeting agendas and reports
- Baseline maturity assessments
- Prioritized sequencing matrix
- Current and target-state diagrams
REQUIRED ATTACHMENTS
6- IT Strategic Plan
- Contractor and Professional Services Agreement
- Scope of Work
- Compensation
- Insurance Requirements
- Policy Against Discrimination Harassment and Retaliation
REQUIRED STAFFING
3- Submit to
- [email protected]
- Scope location
- East Palo Alto, CA
Questions about this RFP
How do I respond to this RFP from City of East Palo Alto?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is August 26, 2026. The solicitation specifies required deliverables that must be addressed in your response. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: [email protected]. For questions, contact Jimmie Tulabing.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including City of East Palo Alto in CA, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
Can I ask questions about this solicitation before submitting?
Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Jimmie Tulabing. Questions and answers are typically shared with all prospective bidders.
What staffing is required for this project?
This solicitation outlines specific staffing requirements. The required roles include: Project manager, Key personnel, Technical specialists. Proposers should demonstrate relevant qualifications and experience for each required role.
What are the key deliverables?
The solicitation specifies the following deliverables: Cybersecurity governance program, Risk assessments, Cybersecurity policies, Incident Response Plan, Business Continuity Plan, Security Governance Meeting agendas and reports, Baseline maturity assessments, Prioritized sequencing matrix, Current and target-state diagrams. Proposals should clearly address how each deliverable will be met.
Show 5 more questions
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Approach (20 points), Firm and Team Qualifications (40 points), Cost Proposal (20 points), Responsiveness and Deliverables Quality (20 points)" Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from City of East Palo Alto?
All active and historical solicitations from City of East Palo Alto are tracked and searchable. As a city agency, City of East Palo Alto regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
What is the contract term for this solicitation?
The anticipated contract term is 5 years. Contract terms may include renewal options.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: IT Strategic Plan, Contractor and Professional Services Agreement, Scope of Work, Compensation, Insurance Requirements, Policy Against Discrimination Harassment and Retaliation. Additionally, proposals should address staffing requirements as outlined in the solicitation. Review the full document from City of East Palo Alto for the complete list.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: East Palo Alto, CA. Review the full solicitation for detailed scope requirements.