1._IFB_C5-CMCS-G1-26_Part_2_063026.docx

Categories 530 - 533

INVITATION FOR BID

IFB C5-CMCS-G1-26

CALNET MANAGED CYBERSECURITY SERVICES

PART 2 – EXHIBITS AND ATTACHMENTS

FOR CATEGORIES 530 - 533

June 30, 2026

Issued by:

STATE OF CALIFORNIA

California Department of Technology Office of Statewide Technology Procurement PO Box 1810 Rancho Cordova, CA 95741 Disclaimer: The original PDF version and any subsequent addenda to this IFB remain the official version. In the event of any inconsistency between the Bidder’s versions, articles, attachments, exhibits, specifications, or provisions, which constitute the Contract, the official State version of the IFB in its entirety shall take precedence.

Categories 510-514

ADDENDUM LOG

Categories 530 - 533

TABLE OF CONTENTS

EXHIBITS

General Provisions Separately attached PDF file. Refer to the file titled 2._Exhibit A_IFB C5-CMCS-G1-26_General Provisions – Telecommunications_Final_ 060625.doc.

CALNET Managed Cybersecurity Services SOW Business Requirements Separately attached MS Word file. Refer to the file titled 3._Exhibit B_C5-CMCS-G1_SOW Bus Req_063026.docx

CALNET Managed Cybersecurity Services SOW Technical Requirements Separately attached MS Word files. Refer to the files titled below:

Category 530 – Managed Multi-Factor Authentication Service (6._Exhibit C_C5-CMCS-G1_530_MFA Tech SOW_063026.docx) Category 531 – Managed Incident Response Retainer Service (7._Exhibit C_C5-CMCS-G1_531_IRR Tech SOW_063026.docx) Category 532 – Managed Anti-Phishing Security Service (8._Exhibit C_C5-CMCS-G1_532_MAPS Tech SOW_063026.docx) Category 533 – Managed Endpoint Detection and Response Service (9._Exhibit C_C5-CMCS-G1_533_EDR Tech SOW_063026.docx)

CALNET Managed Cybersecurity Services SOW Catalog A Separately attached MS Word files. Refer to the files titled below:

Category 530 – Managed Multi-Factor Authentication Service (12._Exhibit D_C5-CMCS-G1_530_Cat A_063026.docx) Category 531 – Managed Incident Response Retainer Service (13._Exhibit D_C5-CMCS-G1_531_Cat A_063026.docx) Category 532 – Managed Anti-Phishing Security Service (14._Exhibit D_C5-CMCS-G1_532_Cat A_063026.docx) Category 533 – Managed Endpoint Detection and Response Service (15._Exhibit D_C5-CMCS-G1_533_Cat A_063026.docx)

CALNET Managed Cybersecurity Services Cost Workbooks Separately attached MS Excel Cost Workbook files. Refer to the files titled below:

Category 530 – Managed Multi-Factor Authentication Service (18._Exhibit E_C5-CMCS-G1_530_CWB_063026.xlsx) Category 531 – Managed Incident Response Retainer Service (19._Exhibit E_C5-CMCS-G1_531_IRR_063026.xlsx) Category 532 – Managed Anti-Phishing Security Service (20._Exhibit E_C5-CMCS-G1_532_CWB_063026.xlsx) Category 533 – Managed Endpoint Detection and Response Service (21._Exhibit E_C5-CMCS-G1_533_CWB_063026.xlsx)

SOW Glossary Separately attached. Refer to the MS Word file titled 4._Exhibit F_C5-CMCS-G1-_SOW Glossary_063026.docx

Individual Price Reduction Agreement (IPRA) Separately attached. Refer to the MS Word file titled 5._Exhibit G_C5-CMCS-G1_IPRA Form_063026.docx

ATTACHMENTS

0. Bidder Question / Request for Change Form Bidder is required to use this form when submitting questions to the Procurement Officer listed in Section 2.2.1, Procurement Officer. Questions are only accepted using this form during official question/answer periods and other designated times to be determined by the Procurement Officer.

Bidder Name:

Contact:

Email:

Telephone:

Date:

Instructions: Clearly and concisely state your question or proposed change. All requests for change must include a brief justification and any facts that might substantiate the request. All questions and requests for change must be submitted by the date specified in Section 2.3, Key Action Dates.

(If Applicable)

1.

2.

3.

4.

5.

Insert additional rows if necessary.

Intent to Bid

SUBMIT TO DEPARTMENT OF TECHNOLOGY

OFFICE OF STATEWIDE TECHNOLOGY PROCUREMENT

Procurement Officer: Saagar.Patel@state.ca.gov

(916) 291-0597 [Bidder Legal Company Name] ¨ Intends to submit a bid for the following categories (check all that apply):

☐ Category 530 – Managed Multi-Factor Authentication (MFA) Service ☐ Category 531 – Managed Incident Response Retainer (IRR) Service ☐ Category 532 – Managed Anti-Phishing Security (MAPS) Service ☐ Category 533 – Managed Endpoint Detection & Response (EDR) Service

Bidder Contact:

Name:

Title:

Company Name:

Address:

City, State and ZIP Code:

Telephone:

E-mail:

Bidder Alternate Contact:

Name:

Title:

Company Name:

Address:

City, State and ZIP Code:

Telephone:

E-mail:

X

Confidentiality Statement As an authorized representative or corporate officer of the company name below, I have the authority to bind the company contractually, and I agree that all persons employed by this company will adhere to the following policy:

All information belonging to the California Department of Technology (CDT), or its affiliated agencies is considered sensitive and confidential and cannot be disclosed to any person or entity that is not directly approved to participate in the work required to execute this Agreement.

I certify that I will keep confidential and secure all project information including (but not limited to) information concerning the planning, processes, development, or procedures of the project, and all communication with CDT or its affiliates related to any procurement process. I will not copy, give, or otherwise disclose such information to any other person unless CDT has on file a Confidentiality Statement signed by the other person(s), and the disclosure is authorized and necessary for the project. I understand that the information to be kept confidential includes, but is not limited to, specifications, administrative requirements, terms and conditions, concepts and discussions, as well as written and electronic materials. I further understand that if I leave this project before it ends, I must continue to keep all project information confidential. I agree to follow any instructions provided by the project relating to the confidentiality of project information.

I fully understand that any unauthorized disclosure I make may be the basis for civil and/or criminal penalties. I agree to advise the Contract Manager immediately in the event of an unauthorized disclosure, inappropriate access, misuse, theft, or loss of data.

I warrant that if my company is awarded the Contract, it will not enter into any agreements or discussions with a third party concerning such materials prior to receiving written confirmation from the State that such third party has an agreement with the State similar in nature to this one.

All materials provided for this Project, except where explicitly stated will be promptly returned or destroyed, as instructed by an authorized CDT representative. If the materials are destroyed and not returned, a letter attesting to their complete destruction, which documents the destruction procedures, must be sent to the Contract Manager before payment can be made for services rendered. In addition, all copies or derivations, including any working or archival backups of the information, will be physically and/or electronically destroyed within five calendar days immediately following either the end of the Contract period or the final payment, as determined by the contracting Agency/State entity.

All personnel assigned to this project shall be provided a Confidentiality Statement and will be expected to sign and return it to the State’s Project Manager before beginning work on this project.

X

Name and Title (Print or Type)

Administrative Requirements Checklist Bidder must indicate agreement to each of the Administrative Requirements in the table below as described in Section 3.7, Administrative Requirements Checklist. A “Yes” response affirms the Bidder understands and agrees to comply with the requirement. A “No” response to any of the mandatory administrative requirements will result in the Final Bid being deemed non-responsive.

Solicitation Section 3 Bidder Agrees (Yes / No)

* Confidentiality Statement is submitted in Phase 1 with Intent to Bid and a copy is again submitted with Bidder’s Final Bid.

Cover Letter Form

ON BIDDER’S COMPANY LETTERHEAD

Bidders are instructed not to include a transmittal letter or any form of introductory material with their Final Bid response.

A title page or cover page listing submission title, date, and a company logo is acceptable, however.

Bidder Address Line 1 Bidder Address Line 2 City, State Zip Code Telephone Number

Date

California Department of Technology Statewide Technology Procurement Division Attn: Saagar Patel, Senior Procurement Officer Saagar.Patel@state.ca.gov cc: tien.le@state.ca.gov Re: CALNET 5, Categories 530 - 533, Solicitation No. IFB C5-CMCS-G1-26 [Bidder Legal Company Name – Bidder’s STP eVAQ Number] (Bidder) submits its proposal in response to the referenced solicitation. A "Yes" response beside each of the below statements indicates Bidder’s agreement with the statement. Bidder understands that failure to agree with any of the statements below may result in rejection of its proposal.

X

GenAI Notification Form Section 1: Bidder Information Solicitation Number Bidder Name Section 2: Reporting In accordance with Part 1 – General Instructions, Section 3.16 Generative Artificial Intelligence Disclosure Notification, provide the following information:

GenAI List Product Name(s) and Product ID(s) that will utilize GenAI.

☐ None – No reportable Generative Artificial Intelligence Section 3 - Signature By signing this document, I acknowledge that, to the best of my knowledge, the above information is true and correct. I understand that failure to provide the above information, or providing inaccurate information, may result in a submitted bid being deemed non-responsive or a material breach of contract, as applicable.

Name Signature Date GenAI Notification Form Instructions

Please use the following instructions to complete the GenAI Notification Form:

1. Section 3 - Signature: The individual authorized to bid on a solicitation or sign a contract on behalf of the organization shall also sign this Form.

Financial Stability Documentation Bidder shall attach its Financial Stability Documentation as Attachment 7 to its Final Bid.

See Part 1 General Instructions Section 3.12 for details surrounding this Administrative Requirement.

Standard Agreement (TECH 213)

Bidder Qualifications and Reference Form Bidder Instructions:

Complete items 1-12 of the reference form and transmit the form to the Reference Contact for completion.

For each Category being bid, two references must be submitted. Each reference must include a description of the project and the experience acquired together with customer satisfaction ratings. One reference must be from a federal, state, local, or other government entity.

The information provided in both the Project Description and Experience Gained fields must be concise yet sufficiently detailed to permit the State to assess the similarity of the described project to the work anticipated for this potential contract. The Experience Gained field must include details surrounding the experience acquired by the Bidder as it relates to the technical requirements of this IFB.

By submitting the reference form, the Bidder declares the reference person identified as Contact Name of Bidder’s Reference in Box 4 below is/was employed by the company specified in Box 3 below.

All dates must be in MM/DD/YYYY format (leading zeros are unnecessary). All experience must have occurred within the four years prior to the original IFB Final Bid due date. Solicitation addenda release dates do not apply.

The State, at its discretion, may contact a Bidder’s reference to validate the claimed experience or clarify the customer’s feedback. Any conflicting information may result in the bid being deemed non-responsive and may result in disqualification of the Bidder from that Category.

Bidder Qualifications and Reference Form Section 1 (to be completed by Bidder)

Bidder:

Bidder Contact:

Company Name of Bidder’s Reference:

Contact Name of Bidder’s Reference:

Reference Contact Title / Project Role:

Reference Contact Email and Telephone No.:

Bidder’s Role: Choose an item.

Applicable Category: Choose an item.

Contract Value:

Single engagements are calculated as follows:

Monthly Recurring Charge (MRC) x 12 months + Non Recurring Charge (NRC).

Project Name:

Project Description:

Experience Gained from this Engagement:

Section 2 (to be completed by Client Reference)

Start Date of Bidder’s Involvement on Project:

End Date of Bidder’s Involvement on Project (for ongoing projects, use the Final Bid submission date):

Does the Bidder’s Project Description accurately reflect the project. Yes ☐ No ☐ If No, please provide details of the discrepancy(ies) below:

Bidder’s Involvement in this Project (role and responsibilities):

Satisfaction Ratings to be Provided by the Bidder's Reference (Max Points: 24) Using the following scale:

0 = Unsatisfactory/No 2 = Satisfactory 3 = Excellent/Yes

By signing below, I declare and certify the information above is true and correct.

X

Bidder Declaration (GSPD 05-105) The Bidder Declaration (GSPD‑05‑105) form and instructions are available at the following location:

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd05-105.pdf

DVBE Declarations If applicable, Bidder must submit a completed Disabled Veteran Business Enterprise Declarations Form (DGS PD 843, formerly STD. 843). The DGS PD 843 is available at the following location:

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/pd_843.pdf

Bidder’s Preferences and Incentives

BIDDERS MUST COMPLETE ALL SECTIONS AND SUBMIT WITH THEIR FINAL BID.

1. SMALL BUSINESS PREFERENCE:

Bidder must check the appropriate box from the choices below.

My DGS Small Business certification number is: ________________________.

Bidder must complete and submit a complete Attachment 10: Bidder Declaration (GSPD-05‑105), indicating the percentage of the revenue that will be received by each DGS certified Small Business subcontractor. The form can also be found at the following link:

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd05-105.pdf

2. DVBE INCENTIVE:

Bidder must check the appropriate box from the choices below.

Bidder must submit a complete Attachment 10: Bidder Declaration (GSPD-05‑105), indicating the percentage of the revenue that will be received by each DGS certified DVBE subcontractor. Bidder must also submit a STD. 843 DVBE Declarations, for each DVBE subcontractor, signed by the DVBE owner/manager. The form can be found on the following link:

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/pd_843.pdf

3. ADDITIONAL BIDDING PREFERENCES:

Bidder shall check the appropriate box or boxes from the choices below.

Bidder must submit a Target Area Contract Preference Act (TACPA) Request Form. The form can be found on the following link:

https://www.dgs.ca.gov/PD/Services/Page-Content/Procurement-Division-Services-List-Folder/Request-a-Target-Area-Contract-Preference

Name of Bidder (Print or Type)

X

Commercially Useful Function Certification Form Bidder Name:

Subcontractor Name:

(submit one form for each SB/DVBE)

All certified small business (SB), micro business (MB), and/or DVBE Contractors, subcontractors or suppliers must meet the commercially useful function (CUF) requirements under Government Code Section 14837 (for SB), Military and Veterans Code Section 999 (for DVBE), and Title II California Code of Regulations, Sections 1896.4 and 1896.62.

Answer questions 1.5 below, as they apply to your company for the goods and/or services being acquired in this solicitation. A California certified SB, MB, or DVBE business must be deemed to perform a Commercially Useful Function (CUF) by meeting ALL the following CUF requirements for Contract/Purchase Order (PO) award consideration.

or N/A ☐

If the answer to any of the five questions is “No” (except for question 4 when marked with “N/A”), may result in your proposal being deemed non-responsive.

Bidder must provide a written statement below detailing the role, services, and goods the subcontractor(s) will provide to meet the commercially useful function requirement. If Bidder is not claiming a SB or DVBE, indicate “Not claiming a preference” in the box below.

At the State’s option prior to award, Bidders may be required to submit additional written clarifying information.

By signing this form, the undersigned Bidder certifies that the Certified Small Business or DVBE satisfies the Commercially Useful Function requirement, and will provide the role, services, and/or goods stated above.

X

TACPA Declarations If applicable, Bidder must submit the applicable Target Area Contract Preference Act (TACPA) forms. The TACPA forms are available at the following locations:

TACPA (STD. 830)

https://www.documents.dgs.ca.gov/DGS/FMC/PDF/std830.pdf Bidder’s Summary of Contract Activities and Labor Hours (DGS/PD 525) https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd0525.pdf Manufacturer Summary of Contract Activities and Labor Hours (DGS/PD 526) https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd0526.pdf image1.png