AI helper
The Teacher Retirement System of Texas (TRS) is issuing a Request for Proposal (RFP) for Cyber Incident Response (IR) services. This RFP seeks qualified vendors to provide services in preparation for and in response to major unplanned cyber events. Key requirements include having an incident response team with specific professional certifications (CISSP, GIAC, ECIH), 24/7 availability, full-time employee team members, adherence to TRS data sovereignty conditions (data within the continental US), and the ability to have team members at TRS locations (Austin, El Paso, London, Rio Grande Valley) within 24 hours. Proposals must be submitted through the TRS Procurement and Vendor eSystem (PAVES). A virtual pre-proposal conference is scheduled, and questions must be submitted by May 13, 2026. The deadline for proposal submission is June 5, 2026. TRS may request presentations, interviews, or demonstrations from top-ranked respondents. The initial contract term is one year with three optional one-year renewals. Pricing is fixed, and no escalation is allowed for renewals. TRS does not require a Vethub subcontracting plan, but if a vendor chooses to subcontract, they must follow specific instructions and obtain prior approval. The evaluation will be based on best overall value, considering qualifications, experience, contract terms, pricing, past performance, key personnel, and proposed performance details.
The deadline for submission of proposals is June 5, 2026, 3:00 p. m. , Central Time. Late proposals may not be considered.
The bid notice does not explicitly detail payment terms beyond stating that submitted invoices shall include itemized travel expenses to the extent applicable and that reimbursement is limited to direct costs on a case-by-case basis with prior written approval. Failure to submit the Progress Assessment Report (PAR) form with the invoice will cause a delay in payment.
The award will be based on the vendor representing the best overall value for TRS, which is a combination of factors including qualifications, experience, acceptance of TRS contract terms and conditions, proposed pricing, and other relevant factors that are in TRS's best interests and comply with TRS's fiduciary duties.
The incident response team must include members with one of the following professional certifications: Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC) Certified Incident Handler (GCIH), or EC-Council Certified Incident Handler (ECIH). Additionally, the respondent must provide 24/7/365 availability for emergency incident response, use only respondent full-time employees for the incident response team, honor TRS data sovereignty conditions (maintaining data within the continental US), and have incident response team members at requested TRS locations within 24 hours as required.
The bid notice does not mention the submission of samples.
The bid notice does not specify a challenge deadline, but it does mention protest procedures governed by 34 Tex. Admin. Code 51. 2, requiring timely submission to legalnotices@trs. texas. gov.
