26-001_CalVCB_2026_RFI_Modernization_Solution_Attachment_2.pdf

This document is an attachment to Request for Information (RFI) No. 26-001 issued by the California Victim Compensation Board (CalVCB), providing links to mandatory IT and security guidelines and standards that respondents must comply with when submitting proposals for the Compensation and Restitution System modernization solution. The RFI seeks innovative input from qualified vendors to replace CalVCB's current claims processing system, which currently operates as a workflow-based platform that captures, processes, and manages victim compensation claims from application through payment. The modernized solution must support the complete claims lifecycle, including eligibility determination, bill processing, payment distribution to claimants and providers, document management, external agency coordination, and an expedited emergency award process for dire circumstances. The document references applicable state and federal compliance frameworks including California Department of Technology policies, the Statewide Information Management Manual, California State Administrative Manual sections 4800-5900, the Federal Information Security Modernization Act (FISMA), and National Institute of Standards and Technology (NIST) Special Publications, including NIST SP 800-53A Revision 5.

No pricing information, set-asides, contract award dates, response deadlines, or contract term details are provided in this attachment. This document serves solely as a reference guide directing respondents to the specific IT governance, security standards, and compliance requirements they must address in their modernization proposals, with links to the authoritative sources for each applicable regulation and policy framework.