Cyber_Program_Administrator.pdf

COUNTY OF ORANGE

SHERIFF-CORONER

REQUEST FOR PROPOSAL (RFP)

FOR

CYBER PROGRAM ADMINISTRATOR

RFP NO. 060-3015504-MA

RESPONSES MUST BE SUBMITTED ELECTRONICALLY TO:

https://secure.procurenow.com/portal/ocgov https://secure.procurenow.com/portal/%7bproject.government.code%7d

County of Orange RFP

Sheriff-Coroner - Cyber Program Administrator, 060-3015504-MA

County of Orange

Sheriff-Coroner

Procurement and Contract Services

320 N. Santa Ana Blvd

Santa Ana, CA

92701

SCHEDULE OF ACTIVITIES

Release of RFP Solicitation April 2, 2026

Question Submission Deadline April 21, 2026, 3:00pm

Question Response Deadline April 22, 2026, 3:00pm

RFP Submittal Closing May 7, 2026, 4:00pm

Proposal Evaluations (Tentative) May 20, 2026

Interviews with the Top Ranked

Firm(s) (Tentative)

June 10, 2026, 8:00am

PROPOSALS MUST BE RECEIVED ON

OR BEFORE

Thursday, May 7, 2026

4:00 pm

SECTIONS

SECTION 1. INTRODUCTION AND INSTRUCTIONS TO RESPONDENTS

SECTION 2. PROTEST PROCEDURES

SECTION 3. SCOPE OF WORK

SECTION 4. SCORING CRITERIA

SECTION 5. COST PROPOSAL

SECTION 6. OCLSB AND DVBE PREFERENCE POLICIES CERTIFICATION

REQUIREMENTS

SECTION 7. VENDOR RESPONSES

Attachments:

A - Model Contract - Cyber Program Administrator

SECTION 1. INTRODUCTION AND INSTRUCTIONS TO RESPONDENTS

1.1 INTRODUCTION

The County intends that the successful Respondent shall provide Cyber Program Administrator proposed in accordance with contract requirements set forth in the solicitation and Model Contract, including Attachments.

1.2 COUNTY HOLIDAYS DURING SOLICITATION PERIOD

During this solicitation period, the Sheriff-Coroner will be closed on the following County holidays - https://hrs.oc.gov/employee-relations/employee-resources

1.3 INSTRUCTIONS TO RESPONDENTS AND PROCEDURES FOR SUBMITTAL

A. Responses are to be uploaded via the County's eProcurement Portal at https://procurement.opengov.com/portal/ocgov. For assistance on uploading Response via County’s eProcurement Portal, please contact procurement-support@opengov.com or https://help.procurement.opengov.com/en/

B. Examine the Contract Documents and the site of the proposed work carefully before submitting a Response for the work contemplated. Investigate the conditions to be encountered, as to the character, quality, and quantities of work to be performed and materials to be furnished and as to the requirements of all Contract Documents.

The County has attempted to provide all information available. It is the responsibility of each Respondent to review, evaluate, and, where necessary, request any clarification prior to submission of a Response. If any person contemplating submitting a response to this

Request for Proposal (RFP) is in doubt as to the true meaning of any part of the solicitation documents attached hereto or finds discrepancies in or omissions from the specifications, they may submit a written request for clarification/interpretation to the County Deputy

Procurement Agent (DPA) via the County’s eProcurement Portal under the bid page for this solicitation.

If clarification or interpretation of this solicitation is considered necessary by County, an addendum shall be issued, and the information will be posted via the County’s eProcurement Portal. Any interpretation of, or correction to, this solicitation shall be issued by the DPA. It is the responsibility of each Respondent to periodically check the County’s eProcurement Portal to ensure that they have received and reviewed any and all addenda to this solicitation.

The County will not be responsible for any other explanations, corrections to, or interpretations of the documents, including any oral information. If an addendum is issued, Respondents must acknowledge the addendum via the County’s eProcurement Portal.

All questions or requests for interpretations must be received within this solicitation by Tuesday, April 21, 2026, before 3:00 pm. The DPA will provide all official communication concerning this solicitation. Any County response relevant to this https://hrs.oc.gov/employee-relations/employee-resources https://procurement.opengov.com/portal/ocgov https://procurement.opengov.com/portal/ocgov mailto:procurement-support@opengov.com https://help.procurement.opengov.com/en/ solicitation other than through or approved by the DPA is unauthorized and will be considered invalid.

C. Responses must be valid for a period of at least three hundred sixty-five (365) calendar days from the closing date and time of receipt. No Response may be withdrawn after the submission date.

D. Each Respondent must submit their response electronically via the County’s eProcurement

Portal.

E. All pages must be submitted on standard 8.5 x 11-inch paper, numbered and identified sequentially by section. Responses must be organized and indexed as outlined in the

Response Requirements Section. It is imperative that all Respondents comply, exactly and completely, with the instructions set forth herein. All responses to this solicitation shall be type written or word-processed (except where otherwise provided or noted), concise, straightforward, and must fully address each requirement and question. Although not as a substitute for a complete written response, additional material, such as technical documents, may be referenced in any response if the material is included in the same section as additional information.

F. Responses are not to be marked as confidential or proprietary. The County may refuse to consider any Responses so marked. All Responses and supporting documents will be subject to the provisions of the California Public Records Act (California Code

Government Code 7920.000 et seq.) (PRA) and will be disclosed or withheld in accordance therewith. The County shall not be liable in any way for disclosure of any such records.

Additionally, all Responses shall become the property of the County.

Respondents should not request that certain information be treated as exempt, and statements in the Responses should not be marked as confidential or proprietary. In the event that any information is marked as confidential or proprietary, as it may be absolutely necessary, Respondents have the sole responsibility of obtaining any applicable injunctive reliefs to prevent the disclosure of such confidential proprietary information in connection with any request made to County pursuant to PRA or a subpoena for disclosure of such information.

G. Each Respondent shall exercise reasonable care and diligence to avoid submitting a

Response that could result in a conflict of interest if Respondent were to be selected. This obligation shall apply to the Respondent, the Respondent’s employees, agents, and relatives, sub-contractors, and third parties associated with accomplishing work and services in response. In the event Respondent has done work for the County on this Project in the past or has reason to believe that a conflict of interest may exist for Respondent in regard to this Project, Respondent should consult with its legal counsel prior to responding to this solicitation. Any Respondent who is found to have an actual conflict of interest may have its response rejected on that ground.

Respondent, its employees and/or consultants may be subject to the provisions of the

California Political Reform Act of 1974 (the “Act”), which (1) requires such persons to disclose any financial interest that may be materially affected by services provided under this Contract, (2) prohibits such persons from making, or participating in making, decisions that could reasonably affect such interest; and (3) may require the filing a Statement of

Economic Interest (Form 700).

If subject to the Act, Respondent shall conform to all requirements of the Act. Failure to do so shall constitute a material breach and is grounds for immediate termination of the

Contract by County. Respondent shall indemnify and hold harmless County for any and all claims for damages resulting from Respondent’s violation of this Section.

H. By submitting a response, the Respondent represents that it thoroughly examined the

County’s requirements, is familiar with the services required under this solicitation and is qualified and capable of providing the services to achieve the County’s objectives.

I. Each Respondent must submit its response in strict accordance with all requirements of this solicitation and compliance must be stated in the response. Deviations, clarifications and/or exceptions must be clearly identified and listed separately as alternative items on additional information section for the County’s consideration as specified in the

Response Requirements Section, “Statement of Compliance.”

Note: Allow sufficient time to upload all required files. The County’s eProcurement Portal will not allow any uploads after the due date and time specified herein, e.g., if Part 1 and 2 uploaded successfully at 1:58:38 P.M. and Part 3 is in progress of being uploaded at 2:00:01

P.M., Part 3 will not upload successfully.

J. Pre-contractual expenses are not to be included in the Cost Proposal, Attachment B, Pricing and Compensation. Pre-contractual expenses are defined as including, but not limited to, expenses incurred by the Respondent in: a) preparing the response to this solicitation; b) submitting that response to the County; c) negotiating with the County any matter related to the Respondent’s response; and d) any other expenses incurred by the Respondent prior to the date of award and execution, if any, of the Contract.

K. Any response may be construed as non-responsive and ineligible for consideration if it does not comply with the requirements of the solicitation, including but not limited to technical features, acknowledgment of receipt of addenda, and page number limits, etc. These are common causes for deeming a response non-responsive.

L. Where two or more Respondents desire to submit a single response to this solicitation, they must do so on a prime/subcontractor basis rather than as a joint venture. The County intends to contract with a single firm that may subcontract with multiple firms (team) but not with multiple firms doing business as a joint venture.

M. County does not require and neither encourages nor discourages the use of lobbyists or other consultants for the purpose of securing business.

N. The County requires a valid D-U-N-S number prior to Contract Award. If needed, your company may obtain one at no cost at www.dnb.com. If you are unable to provide/obtain a D-U-N-S number, please indicate so in your submission response.

O. The County requires a valid UEI number and full registration prior to Contract

Award. Your company must obtain one at no cost at www.usfcr.com. If you are unable to provide/obtain a UEI number, please indicate so in your submission response.

P. Effective from the issuance date of this solicitation until a Contract is awarded or the solicitation is withdrawn, all individuals or entities responding—including their employees, agents, representatives, proposed partners, subcontractors, members, lobbyists, or attorneys (collectively "Respondents")—are prohibited from engaging in any direct or indirect communication with County personnel involved in the selection process, except with the designated Deputy Procurement Agent (DPA). Respondents may continue conducting business with the County on matters unrelated to this solicitation and may communicate with County staff, provided the solicitation is not discussed. Any attempt to engage in discussion regarding this solicitation with anyone other than the designated DPA will be presumed to create an unfair competitive advantage and may result in disqualification.

Q. After the closing date and time for receipt of Responses, evaluation, and if requested by the County, interviews will commence. Respondents who submit Responses most responsive to the County’s requirements may be asked to give a presentation of their response to County staff. The County makes no guarantee as to the number of Respondents selected for interviews. Selected Respondents should be prepared to make its presentation within five (5) business days after notification and be prepared to discuss all aspects of its response in detail, including technical questions regarding the response. Respondents shall not be allowed to alter or amend its response through the use of the presentation process.

1.4 MINIMUM QUALIFICATIONS/REQUIREMENTS

Respondent’s shall meet the following minimum requirements and qualifications to proceed to the evaluation process. Failure to have the ability to, upon County request, provide any of the items requested below may result in disqualification of your response. These qualifications must be maintained during the term of any resultant Contract.

http://www.dnb.com/ http://www.usfcr.com/

A. Respondent must demonstrate a minimum of five (5) years of experience providing specialized government contract support to local, state, and federal government organizations.

B. Respondent shall provide a technical design/approach to services provided.

C. Respondent shall provide references that verify this Minimum Mandatory Qualification and include complete start dates, complete end dates, name of governmental agency, law enforcement agency and Services provided.

D. Respondent must be a US based company and shall not be prohibited from doing business in California, or the County of Orange, and must be appropriately licensed and insured.

E. Respondent must have an active registration in the System for Award Management (SAM) www.sam.gov to comply with funding source requirements.

F. Respondent’s staff may be required to pass the following Security Clearance: Respondent agrees that all contract personnel assigned to the fusion center must obtain and maintain a secret level national security clearance (“security clearance”) throughout the course of employment. Security clearances will be sponsored by the respondent and their contracting agency. Respondent agrees that a security clearance shall be obtained within the first 12 months of the contractor start date. Security clearances taking longer than 12 months will be reviewed on a case-by-case basis and extensions may be granted in writing by the fusion center director, or OCSD designee. The proposer agrees to advise the fusion center director and/or OCSD designee in writing at least 14 calendar days prior to the 12-month date deadline should their contract analyst not possess a valid security clearance under fusion center requirements. Respondent agrees to be responsible for managing and handling

Visitor Access Request (VAR) for both the Department of Homeland Security (DHS), the

Federal Bureau of Investigation (FBI) and other organizations as requested by the fusion center. The respondent agrees to coordinate on VAR submissions with the fusion center director and/or the fusion center security designee to acknowledge and provide annual updates on their employees’ security clearance status. A contract analyst may no longer provide services to the fusion center if the contract analyst is deemed “Not Suitable” to hold a Secret Level clearance with DHS, US Department of Justice, or US Department of

Defense. The respondent will be required to find immediate replacement for the vacancy if an analyst’s security clearance is revoked or the analyst is deemed unsuitable by one of the above mentioned agencies or the OCSD.

G. Respondent shall be eligible to receive a U.S. Government SECRET Clearance, and up to a TOP SECRET level clearance once employed and shall maintain their clearance throughout the course of employment.

http://www.sam.gov/

H. Respondent shall have a U.S. Government Federal Secret level security clearance per

FAR Security Clause 52.204-2

I. Respondent shall be able to pass an Orange County Sheriff’s Department (OCSD) background check, to include a polygraph examination, before the individual commences employment or performs services at the fusion center.

J. Respondent shall agree to comply with training standards and policies associated with the fusion center. The fusion center Privacy Policy can be viewed by going to the following web address:

https://secure6.netsential.com/fusioncenter/html/STAS%20Information%20Privacy%20Policy%2020

14.pdf

1.5 EVALUATION PROCESS

Responses deemed to meet all minimum solicitation requirements will be scored based on the established evaluation criteria, and will be assigned points that measure the responsiveness to each identified criterion. The total number of points earned will be tallied for each response, based upon the Respondent(s) submitted written materials.

Responses shall be evaluated by an Evaluation Panel of job knowledge experts on the basis of the responsiveness to the requirements in this RFP. The County may request clarifications, or otherwise verify the contents of the response, including information about the Respondent, Contractors and sub-contractors.

The scoring is based on evaluation of the response as measured against the Scoring Criteria, which includes County of Orange Procurement Preference Policy, in accordance with Sections 1.8-103 and 4.3-112 of the 2024 County Contract Policy Manual (CPM). A copy of the 2024 CPM can be found at https://cpo.oc.gov/cpm. Responses will be evaluated from the most advantageous to the least advantageous to the County.

1.6 SELECTION/AWARD PROCEDURES

Upon the completion of the evaluation process, the Evaluation Committee will make a recommendation for an award to the County’s DPA. Final award determination shall be subject to reference checks and past performance performance and may be subject to approval(s) by the

County Board of Supervisors. In addition, County reserves the right to verify and validate any information prior to the Contract Award and during the entire term of the Contract.

The Model Contract contained herein this RFP is the Contract proposed for execution. It may be modified to incorporate negotiated items and other pertinent terms and conditions set forth in this

RFP, including special conditions and requirements and those added by addendum, necessary attachments and/or exhibits, and to reflect Respondent’s response and qualifications. Any https://secure6.netsential.com/fusioncenter/html/STAS%20Information%20Privacy%20Policy%202014.pdf https://secure6.netsential.com/fusioncenter/html/STAS%20Information%20Privacy%20Policy%202014.pdf https://cpo.oc.gov/cpm additional exceptions to the terms and conditions made by any Respondent after submission of its response may result in its elimination from further consideration.

Exceptions to the terms and conditions of the Model Contract or the statements regarding

Respondent’s inability to comply with any of the provisions thereof are to be declared in the response to the RFP in VENDOR RESPONSES - Statement of Compliance.

Negotiations may or may not be conducted with the finalist(s); therefore, the response submitted should contain Respondent(s) most favorable terms and conditions, since the selection and award may be made without further discussion or need for clarification. Any additional exceptions to the terms and conditions made by any Respondent(s) after submission of its response may result in elimination from further consideration.

The County will enter into negotiations with the selected Respondent and award a contract upon completion of negotiation of fees and contract terms. The award may be subject to/requires approval(s) by the County Board of Supervisors.

If a satisfactory Contract cannot be negotiated in a timely manner, County, in its sole discretion, may terminate negotiations with the selected Respondent and begin negotiations with the next

Respondent.

1.7 RIGHTS RESERVED TO COUNTY

The County reserves the right to:

A. Make use of any information or ideas in the responses submitted.

B. Request response revisions and hold discussions and negotiations with any Respondent as necessary to serve the best interests of the County.

C. Seek publicly available information about the Respondents.

D. Conduct, or not to conduct, oral interviews and/or presentations with the highest-ranked

Respondent(s) and additional Respondents.

E. Waive, at its discretion, any procedural, non-material defects, irregularity, or informality, which

County deems correctable or otherwise not warranting rejection of the response that do not result in any unfair competitive advantage. Any waiver will not excuse a proponent from full compliance.

F. Verify and validate any information prior to Contract Award and during the entire term of the

Contract.

G. Negotiate the final Contract with any Respondent(s), including pricing/fee schedule, as necessary to serve the best interests of the County;

H. Withdraw or cancel in part or in its entirety this solicitation at any time without prior notice and furthermore makes no representations that any Contract will be awarded to any Respondent responding to this solicitation;

I. Award its total requirements to one Respondent or to apportion those requirements among two or more Respondents as the County may deem to be in its best interests;

J. Reject any response if it is conditional, incomplete or deviates significantly from the services requested in this solicitation; and/or

K. Request Best and Final Offer from any Respondent determined to be within the competitive range.

Unless requested by the County, late Best and Final Offers will not be accepted by the County for any reason. In addition, negotiations may or may not be conducted with Respondents.

L. Make multiple awards to Respondent(s) for services requested in this solicitation, at its sole discretion, to serve the best interests of the County.

M. Defer award of this Contract for a period of 180 days after the solicitation opening. During this period, Respondent shall guarantee the prices and terms quoted in their responses. The County and the responsive, responsible Respondent may mutually agree in writing to extend this deferral period.

Therefore, responses submitted shall contain the Respondent’s most favorable terms and conditions, since the selection and award may be made without discussion with any Respondent.

1.8 TITLE VI SOLICITATION NOTICE

The County of Orange, in accordance with the provisions of the Title VI of the Civil Rights Act of 1964 (78 Stat. 252, 42 USC §§ 2000d to 2000d-4) and the Regulations, hereby notifies all

Respondents that it will affirmatively ensure that any contract entered into pursuant to this advertisement, will be afforded full and fair opportunity to submit response to this solicitation and will not be discriminated against on the grounds of race, color, or national origin in consideration for an award.

1.9 DEPARTMENT OF THE TREASURY, INTERNAL REVENUE SERVICE FORM

W-9/W-8 REQUIREMENTS

Effective June 3, 2006, all Contractors, entering into a Contract with County, who are not already established in Countywide ERP System as an Auditor-Controller vendor, will be required to submit to County a federal Form W-9, or form W-8 for foreign vendors. County will inform

Contractor, at the time of award, if the Form W-9 or W-8 will be required.

In order to comply with this County requirement, within ten (10) days of notification of selection of award of Contract but prior to official award of Contract, the selected Contractor agrees to furnish to Contract administrator, or the Deputy Procurement Agent (DPA) the required W-9 or

W-8.

1.10 LEVINE ACT REQUIREMENT

Effective January 1, 2023, all contractors entering into a contract with the County, will be required to submit the Campaign Contribution Disclosure Form for any contributions made on or after

January 1, 2023. In order to comply with this requirement, Respondent agrees to furnish the required Campaign Contribution Disclosure Information form as a required submittal with its response. Failure to include the form as required will render the response nonresponsive.

SECTION 2. PROTEST PROCEDURES

Any actual or prospective bidder or respondent who alleges an error or impropriety in the solicitation or award of a contract may submit a grievance or protest to Maria Ayala at mayala@ocsheriff.gov, as set forth herein.

PROTEST PROCEDURES

All protests shall be typed under the protestor’s letterhead and submitted in accordance with the provisions stated herein. All protests shall include at a minimum the following information:

A. The name, address, and telephone number of the protestor;

B. The signature of the protestor or the protestor’s representative;

C. The solicitation or contract number;

D. A detailed statement of the legal and/or factual grounds for the protest; and, E. The form of relief requested.

Protest of Solicitation Specifications:

A. All protests related to solicitation specifications must be submitted to the Deputy

Procurement Agent (DPA), Maria Ayala at mayala@ocsheriff.gov, no later than five

(5) business days prior to the Closing Date of the solicitation. Protests received after the five (5) business-day deadline will not be considered by the County.

B. In the event the protest of specifications is denied, and the protestor wishes to continue in the solicitation process, the protestor must still submit a bid/response prior to the close of the solicitation in accordance with the solicitation submittal procedures provided in this solicitation.

Protest of Award of Contract:

A. Protests related to the award of a contract must be submitted to the Deputy Procurement

Agent, Maria Ayala at mayala@ocsheriff.gov, no later than five (5) business days after the Notice of Solicitation Ranking Results is provided by the DPA.

B. Protests relating to a proposed contract award received after the five (5) business day deadline will not be considered by the County.

C. If the five (5) business day period expires without the receipt of a protest, the department may move forward with the contract award or if necessary, file the item for approval by the Board of Supervisors.

Protest Process

A. In the event of a timely protest, the County shall not proceed with the solicitation or award of the contract until the DPA issues a decision on the protest.

B. Upon receipt of a timely protest, the DPA will, within ten (10) business days of receipt of the protest, issue a decision in writing which shall state the reasons for the actions taken.

C. The County may, after providing written justification, make the determination that an immediate award of the contract is necessary to protect the substantial interests of the

County. The award of a contract shall in no way compromise the protester’s right to the protest procedures outlined herein.

D. If the protestor disagrees with the decision of the DPA, the protestor may submit a written appeal to the County Procurement Officer requesting an appeal to the

Procurement Appeals Board, in accordance with the process stated below.

APPEALS PROCESS

A. If the protestor wishes to appeal the protest decision of the Deputy Procurement Agent, the protestor must submit, within three (3) business days from receipt of the Deputy

Procurement Agent’s decision, a written appeal to the Office of the County Procurement

Officer.

Written appeals must be sent by mail to the address below with a courtesy copy by email;

County of Orange/County Executive Office

County Procurement Office

400 W. Civic Center Drive, 5th Floor

Santa Ana, CA 92701

Attn: County Procurement Officer

CPOAppeals@ceo.oc.gov

B. Within fifteen (15) business days, the County Procurement Officer will review all materials in connection with the appeal, assess the merits of the protest and provide a written determination that shall contain his or her decision on whether the appeal shall be forwarded to the Procurement Appeals Board.

C. The decision of the County Procurement Officer on whether to allow the appeal to go forward will be final and there shall be no right to any administrative appeals of this decision.

SECTION 3. SCOPE OF WORK

3.1 BACKGROUND:

1. The Orange County Intelligence Assessment Center (OCIAC), under the Orange County Sheriff’s

Department, is a designated urban area fusion center that provides an integrated, multi-disciplined, information and intelligence sharing network to collect, analyze, and disseminate information on all mailto:CPOAppeals@ocgov.com criminal risks and safety threats to law enforcement, fire, health, private sector and public sector stakeholders in a timely manner in order to protect the residents, visitors, and critical infrastructure while ensuring the civil rights and civil liberties of all persons are recognized. The fusion center works in collaboration with the California State Threat Assessment Center which encompass one state fusion center and five regional fusion centers. More information can be found at https://www.calstas.org. The OCIAC is one of 80 fusion centers nationwide, supporting counterterrorism, crime prevention, all-hazard public safety, public health, and critical infrastructure protection.

The Cyber Program Administrator will be responsible for leading the OCIAC cyber program with oversight and direction by the Orange County Sheriff’s Department Counterterrorism Bureau fusion center director and designee(s).

1.2 Contract Cyber Program Administrator

The Cyber Program Administrator will support the fusion center mission of obtaining, analyzing, and sharing information that has a direct nexus to public safety. The fusion center engages with local, state, federal and private sector partners to mitigate threats with a focus on counterterrorism, and crime prevention while partnering with the nation’s 80 fusion centers.

At the request of fusion center director and/or designee, various levels, the Cyber Program Administrator will be requested based on the operations needs of the fusion center.

All contractors will comply with training standards and policies associated with the fusion center. The fusion center privacy policy can be viewed by going to the following web address:

https://ociac.ca.gov/files/D2DF/SOC%20STAS%20Information%20Privacy%20Policy%202014.pdf

2. Scope of Work & Minimum Qualifications

• The Cyber Program Administrator shall be task with the expansion, and operation of

OCIAC’s cyber threat analysis, prevention, preparation, outreach, cyber incident coordination, cyber case support and training capabilities.

• Cyber Program Administrator duties also shall include understanding and communicating current and emerging cyber threats to the operational area, and operational area partners which shall include federal, state, local, travel, territorial and critical infrastructure key resource partners.

• The Cyber Program Administrator shall access various government and non-government databases, sources, and software through unclassified and classified platforms, and assist cyber program team members in timely and relevant intelligence analysis and cyber incident response.

• The Cyber Program Administrator will coordinate outreach shall be an integral part of the

Cyber Program Administrator’s duties.

https://www.calstas.org/ https://ociac.ca.gov/files/D2DF/SOC%20STAS%20Information%20Privacy%20Policy%202014.pdf

• The Cyber Program Administrator shall coordinate presentations/briefings covering threat assessments, cyber trends analysis, cyber information bulletins, cyber special event assessments, tactical cyber information, and other outreach directed at cyber incident prevention and response.

• The Cyber Program Administrator shall assist in vetting of cyber tips and leads to ensure compliance with National Suspicious Activity Report Initiative and adhere to

Privacy/Civil Liberties and Civil Rights guidelines, support strategic analysis of cyber threats facing the area of responsibility.

• The Cyber Program Administrator shall provide intelligence and subject matter expertise support to federal, state and local investigation entities for the purpose of criminal prosecution.

• The Cyber Program Administrator shall collaborate with partners/stakeholders, participate in working groups, task forces, and other collaborations with law enforcement, public safety, cyber, critical infrastructure, and medical/public health sectors while also support training, exercises, vulnerability assessments and other partner assistance;

including coordination with the fusion center’s private sector coordinator.

• The Cyber Program Administrator shall provide the fusion center a liaison throughout the term of the agreement to act as the go-between for the employee and the Proposer’s organization as well as to monitor Human Relations related issues.

• The Cyber Program Administrator shall conduct source of Cyber Intelligence collection and analysis, to include open source information.

• The Cyber Program Administrator shall be able to perform a multi-discipline analyses of complex raw cyber information, identifying cyber threats, trends, and new developments.

• The Cyber Program Administrator shall conduct cyber security presentations to technical and non-technical audiences regarding intelligence information and analysis.

• The Cyber Program Administrator shall identify cyber threats, capabilities, and cyber intelligence gaps, as well as communicating requirements to fill those gaps.

• The Cyber Program Administrator shall provide its employee(s) with mobile (smart phone) devices capable of receiving fusion center emails and access to download data applications required for their positions, which shall be coordinated with Orange County

Sheriff Department’s IT.

• The Cyber Program Administrator shall provide leadership, professional development, and other training opportunities to assist County employees with career growth, which may not be paid by the fusion center through federal funding due to federal regulations.

3. Work Location information:

Orange County Sheriff’s Department/ TBD

550 N Flower St, City, Santa Ana State, CA. Zip Code 92703

County Contact person: Admin Manager -TBD

Ph: TBD

Email: TBD

SECTION 4. SCORING CRITERIA

Phase 1 - Written Response Scoring: 600 points maximum

Phase 2 - Presentation/Interview Scoring: 350 points maximum

Phase 3 - Cost Proposal: 50 points maximum

4.1 PHASE 1

No. Evaluation Criteria Scoring Method Weight (Points)

1. Firm’s Background, Qualifications &

Experience

A. Company Background and Data

1. Include an overview of firm and brief description of the firm’s history including:

a. Length of time in business;

b. Services provided relevant to the RFP;

c. Describe the Respondent’s experience in performing work of a similar nature to that solicited in this RFP;

and

d. List certifications and/or affiliations that may be relevant to this RFP.

B. Experience

1. Descriptions of at least three (3) recent similar projects that the firm has completed (public sector experience preferred).

a. Include project name, date, and location,

b. Include client name and describe the scope of work,

c. Describe any obstacles encountered and project outcome, and

d. Describe, including experience with successfully coordinating and maintaining project schedules while staying on budget.

2. Describe additional relevant information concerning the services offered in this RFP that it considers important in evaluating its services.

Points Based 250 (41.7% of Total)

C. Qualifications o The technical qualifications and experience of the organization are adequately described as they relate to the Scope of Work

(SOW).

o The proposal identifies specific projects completed within the past five (5) years that demonstrate competency of the tasks outlines in the SOW.

o The ability to meet the needs and concerns of the County of

Orange is adequately demonstrated.

o The proposal demonstrates a clear organizational and financial structure, along with adequate resources, to effectively support the County's needs and perform the required services as outlined in the RFP.

o Respondent shall provide five

(5) reference letters of similar scope of services

2. Key Personnel/Proposed Staffing o Respondent demonstrates experience providing type of service required or experience providing similar services o Respondent demonstrates they have the necessary resources, knowledge, skills, experience, and any required licenses / certifications to provide the required services o For each position outlined in the proposal:

• Respondent is capable of conducting the specific tasks outlined in the RFP

• Respondent provided qualifications of the specific individual who will perform the specific tasks outlined in the RFP. The specific individual proposed shows a strong history or an exceptional capability of performing the specific tasks outlined in the RFP.

If no specific individual is identified, proposer has unequivocally demonstrated their ability to provide a superior candidate for said position.

o Proposal provides resumes of experienced personnel that are capable of and devoted to the successful accomplishment of work to be performed under this contract.

o Staff members have been identified who would be assigned to act in key management and technical positions providing services described in the SOW.

o Proposal includes a description of the role for each identified staff member, including name, position, education, years of experience, and relevant projects on which they have worked.

Points Based 100 (16.7% of Total)

3. Quality/Effectiveness of Work Plan/Project

Approach

A. The proposal provides a thorough description of how the firm plans to meet the requirements of the SOW, addressing specific challenges and opportunities, and explaining why their company is best suited to assist the County.

B. An implementation plan is included outlining a description of efforts the firm will undertake to achieve client satisfaction and to meet project deadlines, including timely and adequate billing and invoicing structure.

Points Based 100 (16.7% of Total)

4. Organization/Completeness of Response

A. Response demonstrates understanding of project and objectives as it relates to the scope of work.

B. Response demonstrates requirements are addressed and adhered to.

C. Response is complete, comprehensive, and well-organized.

Points Based 50 (8.3% of Total)

5. Compliance with the County Model

Contract

*Note: Respondents submitting exceptions to the County Model Contract of this RFP, will receive a score of “0” for this criterion.

Points Based 100 (16.7% of Total)

4.2 PHASE 2

No. Evaluation Criteria Scoring Method Weight (Points)

1. Presentation/Interview Scoring Format: 400 points maximum:

County reserves the right to conduct, or to not conduct, oral interviews and/or presentations with the highest-scored Respondent(s). The decision whether to conduct oral interviews/presentations rests solely with

County and the decision of the DPA is final.

Respondents shall be ready to attend interview within fifteen (15) calendar days of notification.

Any inquiry to determine the responsibility of a

Respondent to this RFP may be conducted.

Respondent agrees that the submission of a

Response is permission by Respondent for

County to verify all information contained therein. If County believes it necessary, additional information may be requested from

Respondent. The County may also send written questions and ask for written responses within five (5) business days. Failure to comply with any such request may disqualify a Respondent from further consideration. Respondents must be prepared to discuss all aspects of their Response in detail, including technical questions.

Respondents will not be allowed to alter or amend their Response through the use of the presentation process.

NOTE: If interview/presentations are not conducted, the Written Response shall account for 1000 total points of the scoring.

Points Based 350 (85.8% of Total)

2. Cost Proposal

The Response with the lowest cost receives the maximum points allowed for this criterion. All other proposals receive a percentage of the points available based on their cost relationship to the lowest-priced Response.

Should any Preference Policies apply, the

Preference Policy Applicable to Cost Proposal criteria will be scored.

Points Based 50 (12.3% of Total)

3. Preference Policy Applicable to Cost

Proposal

A. Request for Proposal (RFP):

An additional five percent (5%) shall be applied to the tallied cost score of each certified OCLSB or DVBE to obtain their final score. If the final score of any OCLSB or DVBE matches the final score of a non-

OCLSB or non-DVBE, preference shall be given to the certified

OCLSB. If two or more OCLSB or

DVBEs have the same final score, the

County shall determine the contract award based on the County’s best interest.

B. Dual OCLSB and DVBE Preference provides for the following:

1. Business Certified as OCLSB and DVBE If a State-certified OCLSB is also a State-certified DVBE, the preference given to that business shall be 8% instead of 5%.

C. Subcontractors:

If bidder is submitting subcontractors to qualify for the OCLSB or DVBE preference, bidder must demonstrate through the Staffing Plan that 20% of the total bid amount is allocated to the OCLSB and/or DVBE subcontractor(s).

*NOTE: DVBE PREFERENCE IS NOT

APPLICABLE TO PUBLIC WORKS OR A-E

CONSTRUCTION PROJECTS.

Points Based 8 (2% of Total)

SECTION 5. COST PROPOSAL

Line Item Description Unit of Measure Unit Cost

1 Cyber Program Administrator Year 1 Annual

2 Cyber Program Administrator Year 2 Annual

3 Cyber Program Administrator Year 3 Annual

Line Item Description Unit of Measure Unit Cost

4 Cyber Program Administrator Year 4 Annual

5 Cyber Program Administrator Year 5 Annual

SECTION 6. OCLSB AND DVBE PREFERENCE POLICIES CERTIFICATION

REQUIREMENTS

County of Orange Local Small Business (OCLSB) Preference and Disabled Veteran

Business Enterprise (DVBE) Preference Policies Certification Requirements

6.1 OCLSB:

Effective January 1, 2020, County of Orange Board of Supervisors adopted the OCLSB Preference policy. Implementation of the OCLSB Preference policy supports local businesses, the local economy and the development of the County’s tax base.

To be certified as a Local Small Business by the County of Orange, a business shall meet (1) and

(2) below:

A. Local Business Requirements:

1. Maintains their principal center of operations (i.e. headquarters) within Orange

County, and:

2. Has:

a. A business address located in the County of Orange that is not a post office box, or

b. A valid business license or certificate of occupancy issued by the County of

Orange or by an Orange County city, or other documentation acceptable to the

County of Orange.

B. Small Business Requirements:

1. Must be certified as a Small Business by the State of California Department of

General Services (DGS): and, C. Above requirements must be valid at the time of proposal submittal through the time of award of the contract. The terms and conditions of the contract shall additionally require the contractor to remain in compliance with the Local Business requirements (pursuant to subsection (a) above) through the term of the contract, including any extensions or renewals, and shall provide that contractor’s failure to comply may be construed by County as a material breach of the contract.

6.2 DVBE:

Effective January 1, 2021, County of Orange Board of Supervisors adopted the DVBE Preference policy.

The DVBE Preference policy supports local business opportunity, economy and the development of

County’s tax base, and in addition recognizes the service and sacrifice given by the men and women of our

Armed Forces.

To be certified as a Disabled Veteran Business Enterprise by the County of Orange, a business shall meet

(A) and (B) below:

A. Must be certified as a DVBE by the State of California Department of General Services (DGS);

and, B. DGS DVBE requirements must be valid at the time of bid/proposal submittal through the time of award of the contract.

To participate as an OCLSB and/or DVBE please read and follow the process outlined in COUNTY OF

ORANGE LOCAL SMALL BUSINESS (OCLSB) AND DISABLED VETERAN BUSINESS

ENTERPRISE (DVBE) CERTIFICATION REQUIREMENTS in the VENDOR RESPONSES.

*NOTE: DVBE PREFERENCE IS NOT APPLICABLE TO PUBLIC WORKS OR A-E

CONSTRUCTION PROJECTS.

6.3 OCLSB/DVBE CERTIFICATION REQUIREMENTS:

County Of Orange Local Small Business (OCLSB) Preference And Disabled Veteran

Business Enterprise (DVBE) Certification Requirements

A. To participate as an OCLSB and/or DVBE the following requirements must be met:

1. Must be certified with State of California the Department of General Services (DGS) as a Small Business. - https://caleprocure.ca.gov/pages/sbdvbe-index.aspx

2. Must be certified with DGS as a DVBE. - https://caleprocure.ca.gov/pages/sbdvbe-index.aspx

3. Maintains their principal center of operations (i.e. headquarters) within Orange

County.

4. Certification must be valid at the date/time solicitation is closed, and it shall remain in effect at the time of contract award. County reserves the right to verify and/or reject incomplete documents.

5. Complete and sign the Affirmation form attached herein. The signed Affirmation form and the OCLSB Certification are required and must be returned with the solicitation response.

B. OCLSB or DVBE Preference provides for the following:

1. Invitation for Bid – IFB

A five percent (5%) deduction in the original bid price shall be applied to all https://caleprocure.ca.gov/pages/sbdvbe-index.aspx https://caleprocure.ca.gov/pages/sbdvbe-index.aspx https://caleprocure.ca.gov/pages/sbdvbe-index.aspx confirmed OCLSB or DVBE bidders for evaluation purposes. If the lowest bidder is a certified OCLSB or DVBE bidder, the contract will be awarded at the certified

OCLSB or DVBE’s original bid price. The maximum allowable preference deduction is $100,000.

2. Request for Proposal - RFP

a. No Cost - Any Request for Proposals that does not include cost as a scoring criteria shall instead apply the five percent (5%) or eight percent (8%) preference percentage pursuant to the eligibility requirements above to a scoring criteria in the RFP that makes up no more than twenty percent (20%) of the total RFP.

b. With Cost - An additional five percent (5%) shall be applied to the total cost of each certified OCLSB or DVBE to obtain their final score. If the final score of any OCLSB or DVBE matches the final score of a respondent who is not an

OCLSB or DVBE, preference shall be given to the certified OCLSB or DVBE. If two or more OCLSBs and/or DVBEs have the same final score, the County shall determine the contract award based on the County’s best interests.

Notwithstanding these preference procedures, the Orange County Board of

Supervisors reserves the right to award contracts in any other permissible manner in consideration of the County’s best interests.

C. Dual OCLSB and DVBE Preference provides for the following:

1. Business Certified as OCLSB and DVBE

If a State-certified OCLSB is also a State-certified DVBE, the preference given to that business shall be 8% instead of 5%.

D. Subcontractors

If bidder is submitting subcontractors to qualify for the OCLSB or DVBE preference, bidder must demonstrate through the Staffing Plan that 20% of the total bid amount is allocated to the OCLSB and/or DVBE subcontractor(s).

*NOTE: DVBE PREFERENCE IS NOT APPLICABLE TO PUBLIC WORKS OR A-E

CONSTRUCTION PROJECTS.

SECTION 7. VENDOR RESPONSES

Responses must be prepared simply and economically, providing a straightforward, concise description of capabilities to satisfy the requirements of this RFP. Emphasis should be on completeness and clarity of content with sufficient detail to allow for accurate evaluation and comparative analysis. Response (Part 3) shall not exceed the 200 Page Limit. No Exceptions.

Note: Responses that exceed the page limit noted above will be disqualified from further consideration.

Responses are electronically organized into three (3) Parts and are indexed in the order outlined below. Complete all required questions within each part.

Cover Page, Table of Contents, dividers and County forms will not count towards the page limit.

Part 1 - Compliance Statements (will not count against the page limit)

Part 2 - Company Profile & References (will not count against the page limit)

Part 3 - Respondent's Responses (counts against the page limit, no exceptions)

Remove red text if not a Design/Construction solicitation:

Upon recommendation of contract award, Design-Build Entity (D-BE) will be required to submit the following documents with ten (10) days of County notification, unless otherwise specified in the RFP:

A.

7.1 PART 1: COMPLIANCE STATEMENTS

Some *required questions might not be applicable to your company. Do not leave any required fields blank. Please indicate "N/A" when necessary. A required field that is left blank will prohibit your response from being submitted.

*indicates that it is required.

7.1.1 Validity of Response*

The County requires that all response be valid for at least three hundred sixty-five (365) calendar days. Submissions not valid for at least three hundred sixty-five (365) days will be considered nonresponsive. The Respondent shall state the length of time for which the submitted response shall remain valid below:

Please state 365 calendar Days if your response will be valid for that period of time. If your response will be valid for a different period of time please list the appropriate number of calendar days.

Maximum response length: 100 characters

*Response required

7.1.2 Certification of Understanding*

The County assumes no responsibility for any understanding or representation made by any of its officers, employees or agents during or prior to the execution of any Contract resulting from this solicitation unless:

A. Such understanding or representations are expressly stated in the Contract; and

B. The Contract expressly provides that the County therefore assumes the responsibility.

Representations made but not expressly stated and for which liability is not expressly assumed by the County in the Contract shall be deemed only for the information of the Respondent.

Respondent certifies that such understanding has been considered in this response.

☐ Please confirm

*Response required

7.1.3 Minimum Qualifications/Requirements Statement*

The Respondent certifies that it has thoroughly examined the County’s requirements and meets all minimum qualifications and requirements set forth in this RFP.

☐ Please confirm

*Response required

7.1.4 Certificate of Insurance *

The…