Cyber Security Assessme Government Bids & RFPs

The bid notice does not explicitly state a delivery deadline for the services or products. The period of performance is described as a base year with four one-year option years, and a 60-day transition period is scheduled for both phase-in and phase-out. The bid notice states, The contractor shall be 100 percent staffed by no later than 60 days after contract award.

The bid notice states, All contractor personnel supporting this requirement shall be part of the cyber workforce cwf and the contractor shall provide the government a list of personnel mapped to their cwf role as part of cdrl a002, and their baseline certificates prior to the start of the period of performance or provide a plan to receive certification within 3 months of the period of performance. It also mentions, The contractor shall ensure that all contractor personnel performing under this to possess or obtain the required operating systemcomputing environment.

The bid notice mentions, If a contractor is determined to be responsible for an es, all direct and indirect costs incurred by the government for es remediation will be charged to the contractor. The incident will be reflected in the contractors performance rating.

The bid notice states that proposals are due by Monday, April 27, 2026, by 5:00 p. m. EST. The vulnerability assessment and risk assessment activities should be completed within 30 days, and disaster recovery drills and tabletop exercises should be completed by the end of the calendar year.

The bid notice states that progress payments will be made monthly, with ARC paying or rejecting properly submitted invoices within 45 days of receipt. Final payment will be made upon ARC's determination that all contractual requirements have been fulfilled.

The bid notice states that written proposals will be evaluated based on the following weighted criteria: Technical approach (35%), Demonstrated qualifications and experience (30%), Reasonableness of proposed fee and expenses (20%), Client references and letters of support (10%), and Proposed cost (5%).

The bid notice states that the service provider must have at least one certified information systems auditor (CISA) or equivalent certification holder assigned to the project. Equivalent certifications include, but are not limited to, CISSP, CISM, CEH, or OSCP. Proposals must also include the legal name of the firm, point of contact information, qualifications and technical competence, description of relevant project experience with at least three client references, listing of key project personnel and their qualifications, a detailed description of the proposed technical approach, and a proposed cost breakdown.

The bid notice states that sample reports representative of the deliverables described in this RFP must be included with the proposal.

The bid notice states that the deadline for questions is Monday, April 6, 2026, by 5:00 p. m. EST.

The bid notice states that the maximum contract value shall not exceed $45,****.