City of East Palo Alto vCISO Support Services RFP 2026
City of East Palo Alto, City of East Palo Alto, CA·City
Track City of East Palo Alto solicitations
Get alerted when City of East Palo Alto posts a new RFP, and see the pre-RFP signals months before it publishes.
- Primary Contact
- Jimmie Tulabing
- Contract Term
- 5 years
- Scope Location
- East Palo Alto, CA
- Submission Address
- [email protected]
SUMMARY
The City of East Palo Alto is soliciting proposals for a five-year contract to provide virtual Chief Information Security Officer (vCISO) services, including governance, risk assessment, and policy management. Proposals are due August 26, 2026.
EVALUATION CRITERIA
Approach (20 points), Firm and Team Qualifications (40 points), Cost Proposal (20 points), Responsiveness and Deliverables Quality (20 points)
REQUIRED DELIVERABLES
Cybersecurity governance program, Risk assessments, Cybersecurity policies, Incident Response Plan, Business Continuity Plan, Security Governance Meeting agendas and reports, Baseline maturity assessments, Prioritized sequencing matrix, Current and target-state diagrams
REQUIRED ATTACHMENTS
IT Strategic Plan, Contractor and Professional Services Agreement, Scope of Work, Compensation, Insurance Requirements, Policy Against Discrimination Harassment and Retaliation
REQUIRED STAFFING ROLES
Project manager, Key personnel, Technical specialists
This was decided in a budget meeting long before the RFP was public. Civic IQ had it then. The next one doesn't have to get away.
Work in government? Get Civic IQ free →Frequently asked questions
Common questions about this solicitation, answered from the record.
How do I respond to this RFP from City of East Palo Alto?
Review the full solicitation document for submission requirements, evaluation criteria, and deadlines. The submission deadline is August 26, 2026. The solicitation specifies required deliverables that must be addressed in your response. Be sure to include all required attachments as outlined in the solicitation. Submissions should be delivered to: [email protected]. For questions, contact Jimmie Tulabing.
What are the evaluation criteria for this solicitation?
This solicitation includes specific evaluation criteria that will be used to score proposals. The criteria include: "Approach (20 points), Firm and Team Qualifications (40 points), Cost Proposal (20 points), Responsiveness and Deliverables Quality (20 points)" Vendors should carefully align their proposals with each criterion to maximize their score.
Where can I find more RFPs from City of East Palo Alto?
All active and historical solicitations from City of East Palo Alto are tracked and searchable. As a city agency, City of East Palo Alto regularly publishes solicitations. Visit the agency profile to see current open bids, past contracts, vendor relationships, and decision-maker contacts.
What is the contract term for this solicitation?
The anticipated contract term is 5 years. Contract terms may include renewal options.
What documents are required to bid on this RFP?
Requirements vary by solicitation, but common documents include a technical proposal, cost/price proposal, proof of insurance, relevant certifications, past performance references, and any forms specified in the solicitation. This solicitation specifically requires the following attachments: IT Strategic Plan, Contractor and Professional Services Agreement, Scope of Work, Compensation, Insurance Requirements, Policy Against Discrimination Harassment and Retaliation. Additionally, proposals should address staffing requirements as outlined in the solicitation. Review the full document from City of East Palo Alto for the complete list.
Can small businesses or minority-owned firms bid on this RFP?
Most government agencies, including City of East Palo Alto in CA, encourage participation from small businesses, minority-owned, women-owned, and disadvantaged business enterprises (MBE/WBE/DBE). Check the full solicitation for any small business participation goals.
What happens after the RFP submission deadline?
After the deadline, the issuing agency reviews all submissions against the stated evaluation criteria. This typically includes a compliance check, technical evaluation, cost analysis, and may involve oral presentations with shortlisted vendors.
Can I ask questions about this solicitation before submitting?
Yes, most solicitations allow vendors to submit questions during a designated period. The primary contact is Jimmie Tulabing. Questions and answers are typically shared with all prospective bidders.
What is the scope of this project?
This solicitation defines a specific project scope. The scope covers the following locations: East Palo Alto, CA. Review the full solicitation for detailed scope requirements.
What staffing is required for this project?
This solicitation outlines specific staffing requirements. The required roles include: Project manager, Key personnel, Technical specialists. Proposers should demonstrate relevant qualifications and experience for each required role.
What are the key deliverables?
The solicitation specifies the following deliverables: Cybersecurity governance program, Risk assessments, Cybersecurity policies, Incident Response Plan, Business Continuity Plan, Security Governance Meeting agendas and reports, Baseline maturity assessments, Prioritized sequencing matrix, Current and target-state diagrams. Proposals should clearly address how each deliverable will be met.
Bring us your territory.
We'll show you what is forming.
B2G and SLED sales intelligence. Surface government procurement signals from 100,000+ state, local, and education agencies months before the RFP.