EINF71823_-_Cybersecurity_Training-_RFQ_ITS_Rev._3.25.pdf

MALIA M. COHEN

California State Controller

March 14, 2024

REQUEST FOR QUOTE for INFORMATION TECHNOLOGY (IT) SERVICES (RFQ-ITS) EINF71823

Cybersecurity Training Software-as-a-Service (SaaS)

Bidders are invited to review and respond to the State Controller's Office (SCO) Request for Quote for Information Technology (IT) Services (RFQ-ITS) Number EINF71823. To submit a bid for these services, the Bidder must comply with the instructions contained in this document as well as the requirements stated in Sample Agreement, Exhibit A, Scope of Work. By submitting a bid, the bidding firm agrees to the terms and conditions stated in this RFQ-ITS.

Read the attached document carefully. The Bidder is solely responsible for ensuring that the complete bid is received by SCO in accordance with the Bid requirements, prior to the date and time specified in the solicitation. Bids received after the specified deadline will not be considered for review. SCO shall not be responsible for any delays in submittal, to include misdelivery. SCO reserves the right to cancel this RFQ-ITS without cause, at any time prior to award.

Bidders are advised to check the Cal eProcure website for addendums, modifications, and updates to the Bid documents. SCO is not responsible for failure of the prospective bidder to check for any bid document updates, changes, or answers to questions posted on Cal eProcure. Failure to check the website periodically will be at the Bidder’s sole risk.

If a discrepancy occurs between the information in the advertisement appearing on the Department of General Services (DGS), California State Contracts Register (CSCR) on the Cal eProcure website:

https://caleprocure.ca.gov/pages/Events-BS3/event-search.aspx, and the information in the herein RFQ-ITS, the information in the attached RFQ-ITS shall take precedence.

Note that all IT agreements for IT services cloud-based software entered into with the State of California will include by reference General Provisions – Information Technology - Cloud Computing – Software as a Service (SaaS) (Rev. 6/21/2022) that may be viewed and downloaded at internet site:

https://www.dgs.ca.gov/-/media/Divisions/PD/PTCS/OPPL/Model- Language/IT/ITGeneralProvisions062122.pdf.https://www.dgs.ca.gov/- /media/Divisions/PD/PTCS/OPPL/Model- Language/CloudComputing_SaaSGeneralProvisions062122.pdf?la=en&hash=7B3D8F241D1486B9CA4 4AAE0932AA21BBBE19D74. If you do not have internet access, a hard copy can be provided.

Additional Bidder Instructions (DGS PD 451) may be viewed and downloaded from the following website:

https://www.documents.dgs.ca.gov/dgs/FMC/GS/PD/DGSPD%20451.pdf. If you do not have Internet access, a hard copy can be provided.

In the opinion of SCO, this RFQ-ITS is complete and without need of explanation. However, if you have questions, or should you need any clarifying information, please send an email to admcpu@sco.ca.gov by the Written Questions Submittal Deadline in Section I, General Information, Item B. Key Action Dates.

Please note that no verbal information given will be binding upon SCO unless such information is issued in writing through an official addendum.

State Controller’s Office RFQ-ITS Number EINF71823

TABLE OF CONTENTS

SECTION I. GENERAL INFORMATION

A. Description of Services B. Key Action Dates C. Written Questions and Answers D. RFQ-ITS Bid Guidelines E. RFQ-ITS Bid Content F. RFQ-ITS Bid Submission G. Participation, Preference and Incentive Programs H. Award and Protest

SECTION II. EVALUATION INFORMATION

A. Evaluation Process B. Evaluation Criteria C. Tie Break Process

Attachment 1, Required Attachment Checklist Attachment 2, Bidder Certification Sheet Attachment 3, Contractor Point of Contact Attachment 4, Payee Data Record (STD 204) and Payee Data Record Supplement

(STD 205)*

Attachment 5, Bidder Declaration (Written) (GSPD-05-105) Attachment 6, Disabled Veteran Business Enterprise (DVBE) Declarations (DGS PD 843)* Attachment 7, Target Area Contract Preference Act Preference Request for Goods and

Services Solicitations (STD 830)* Attachment 8, Bidder’s Summary of Contract Activities and Labor Hours (DGS PD 526)* Attachment 9, Bidding Preferences and Incentives Attachment 10, Acknowledgement of Contract Exhibits Attachment 11, California Civil Rights Laws Certification (DGS OLS 04) Attachment 12, Contractor/Consultant Confidentiality and Non-Disclosure Acknowledgement

(ISO-004b) Attachment 13, Contractor/Consultant Organization Information Security Agreement

(ISO-004c) Attachment 14, Cost Worksheet

Standard Agreement (STD 213)

Sample Agreement Exhibit A – Scope of Work Exhibit B – Budget Detail and Payment Provisions Exhibit B – Attachment 1, Cost Worksheet Exhibit C – General Provisions – Information Technology Cloud Computing – Software as a Service (SaaS) Exhibit D – Special Terms and Conditions

*Submit only if applicable.

SECTION I. GENERAL INFORMATION

A. Description of Services

The State Controller’s Office (SCO) is seeking a Contractor to provide annual licenses for online access to cybersecurity training, tools, templates, and cybersecurity guidance. which is a Software-as-a-Service (SaaS) solution.

See the Sample Agreement, Exhibit A, Scope of Work for a complete description of services.

Agreement Term

The term of this Agreement will be for a period of three years with the options to amend to add/delete licenses, and add funds as deemed necessary by SCO. The rates on Sample Agreement, Exhibit B, Attachment 1, Cost Worksheet will not change as a result of any amendment to this agreement.

Contractors are cautioned that no services will begin until the Agreement has been fully executed. If services are performed prior to agreement approval, and the Agreement for any reason is not approved, all previous services performed by the Contractor is considered donated to SCO and no payment shall be made for that work.

Agreement Amount

The Contractor and SCO Contract Manager listed in Exhibit A, SOW, Section D. Contacts, Item 1 are responsible for monitoring the Agreement to not exceed the maximum amount of the Agreement without an executed amendment.

B. Key Action Dates

It must be understood that time is always of the essence, both for the RFQ-ITS submittal and for agreement completion. Bidders are advised of the key action dates and times shown below and are expected to adhere to them.

EVENT DATE

Release of RFQ-ITS March 14, 2024

Written Questions Submittal Deadline March 21, 2024, 2:00 PM Pacific Time (PT)

SCO Response to Written Questions March 27, 2024 March 25, 2024

Final Date for Bid Submission* April 4, 2024 March 29, 2024, 10:00 AM PM

PT

Evaluation of Bids** April 8, 2024 March 29, 2024

Notice of Intent to Award April 9, 2024 March 29, 2024

Anticipated Agreement Award Date April 17, 2024 April 9, 2024

Anticipated Agreement Start Date April 22, 2024 April 11, 2024

* Dates after the Final Date for Bid Submission are estimates only and may be subject to change. SCO will adhere to the listed dates as strictly as possible but will not be held accountable for changes due to unforeseen circumstances.

** If Target Area Contract Preference Act (TACPA) is claimed, add a minimum of five additional business days to each event after the Evaluation of Bids date.

C. Written Questions and Answers

1. Bidders may submit questions for clarification of the content of this RFQ-ITS to SCO Contracts & Procurement (C&P) to admcpu@sco.ca.gov.

2. Questions must be received by the date and time specified in Section I. General Information, Item B.

Key Action Dates. Questions and answers will be provided without identifying the submitter. At the sole discretion of SCO, SCO may paraphrase questions for clarity.

3. The subject line of the email should read, RFQ-ITS EINF71823 Questions – Company Name.

4. The Bidder must reference the section and page number about which they are inquiring.

5. Questions not submitted in writing by the date for Written Questions Submittal Deadline specified in

Section I. General Information, Item B. Key Action Dates, will be answered at SCO option.

6. Questions and Answers will be issued via an addendum to this RFQ-ITS and be posted to Cal eProcure by the date specified in Section I. General Information, Item B. Key Action Dates.

D. RFQ-ITS Bid Guidelines

1. Costs incurred for developing bids, in anticipation of award of the Agreement, are entirely the responsibility of the Bidder and shall not be charged to the State of California.

2. It is the Bidder’s responsibility to provide all necessary information for SCO to evaluate the Bid, verify requested information, and determine the Bidder’s ability to perform the services defined in Sample Agreement, Exhibit A, Scope of Work and Attachment 14, Cost Worksheet.

3. Bidders who are DGS certified California Small Businesses (SB), Micro Businesses (MB) and/or

Disabled Veteran Business Enterprises (DVBE) must provide and include an SB/DVBE Certification with the Bid. SCO will verify that SB/DVBE certifications are valid at the time the Bid is due. In accordance with California Government Code Section 14837(d) and California Military and Veterans Code Section 999, all SB/MB and DVBE contractors, subcontractors, and suppliers that bid on or participate in a State agreement, regardless of being an oral or written solicitation, shall perform a Commercially Useful Function (CUF).

4. The Bidder may modify a bid after its submission by withdrawing its original bid and resubmitting a new bid prior to the Final Date for Bid Submission. Contractor modifications in any other manner, oral or written, will not be considered.

5. The Bidder may withdraw its bid by submitting a written withdrawal request to admcpu@sco.ca.gov signed by the Bidder or an authorized agent. A bidder may thereafter submit a new bid prior to the Final Date for Bid Submission. Bids may not be withdrawn without cause after the Final Date for Bid Submission.

6. SCO does not accept alternate agreement language from a prospective contractor. A bid with such language will be considered a counteroffer and will not be considered. The State’s Terms and Conditions are not negotiable.

7. Bids should provide straightforward and concise descriptions of the Bidder’s ability to satisfy the requirements of this RFQ-ITS. Omissions, inaccuracies, or misstatements will be cause for rejection of a bid.

8. SCO may modify the RFQ-ITS by issuing an addendum, prior to the Final Date for Bid Submission, which will be posted to Cal eProcure.

9. SCO reserves the right to reject all bids. SCO is not required to award an agreement.

10. This RFQ-ITS and the Contractor’s bid will be made a part of the Agreement file.

11. At SCO option prior to award, bidders may be required to submit additional written clarifying information. Failure to submit the required written information as specified may be grounds for bid rejection.

12. No oral understanding or agreement shall be binding on either party.

13. Bids that contain false or misleading statements that do not support an attribute or condition claimed by the Bidder will be rejected.

E. RFQ-ITS Bid Content

In order to be responsive to this RFQ-ITS, the following requirements must be met. Failure to respond to and submit these items with the required information may result in disqualification.

This requirement is Mandatory Pass/Fail.

1. Administrative Requirements

a. Completion of all required Attachments listed on Attachment 1, Required Attachment Checklist.

b. On Attachment 2, Bidder Certification Sheet, the Bidder must complete, sign, and return the

Attachment. The Bidder will include any necessary supporting documentation (i.e. certifications and licenses, etc.) necessary to validate the Bidder’s qualifications.

Attachment 2 must be signed by an individual authorized to bind the business contractually and must identify the title or position that the individual holds in the business.

2. Licenses and Certifications

a. The Bidder must provide copy of a valid California city or county business license (if applicable); or, if a corporation located within the State of California, incorporation documents; or, letter from the Secretary of State or, if not a California business, an affidavit that the business is in good standing with the state, province, or country in which business is headquartered.

b. Bidders shall obtain, at their expense, all license(s) or permit(s) required by law for accomplishing any work required in connection with this agreement.

c. All licenses must remain valid for the term of the Agreement. In the event that any license or certification expires at any time during the term of this agreement, the Contractor agrees to provide SCO a copy of the renewed license within 30 days following the expiration date. In the event the Contractor fails to keep in effect at all times all required licenses, SCO may, in addition to any other remedies it may have, terminate this agreement upon occurrence of such event.

F. RFQ-ITS Bid Submission

1. Bidders must submit their bids in PDF format attached to an email to admcpu@sco.ca.gov by the date and time specified in Section I. General Information, Item B. Key Action Dates.

2. Bids must include the Bidder’s submission in with the subject line identifying the submission as BID – Company Name.

3. Bids must be consecutively numbered, each required element clearly identified, and in the sequence presented in this RFQ-ITS. Include all necessary supporting documentation (i.e., licenses, certifications, etc.) necessary to validate the Bidder’s qualifications.

4. Email Requirements

a. Bidders must ensure that emails do not exceed a file size of 20 megabytes.

b. Bidders must ensure that emails do not contain scripts, executable files, or macros, which may make their emails undeliverable.

c. Do not imbed links within the PDF—all documents must be contained within the PDF. SCO cannot access links to external sources. Bids containing links to external sources will be rejected.

d. If a bid should exceed acceptable file size, the Bidder shall split the email into multiple emails to ensure delivery.

e. Bid submissions that are sent from unrecognized email servers may be blocked by SCO security filters and be flagged as spam, thereby rendering them unsubmitted.

f. Successful email submissions will receive an automatic reply from admcpu@sco.ca.gov. Automatic replies only confirm receipt of emails and do not assess bidders’ responsiveness to the RFQ-ITS requirements in the email content or in any attachments therein.

g. LATE BID SUBMISSIONS WILL NOT BE ACCEPTED—NO EXCEPTIONS.

5. Bids shall provide straightforward and concise descriptions of the Bidder’s ability to satisfy the requirements of this RFQ-ITS. The Bid must be complete and accurate. Omissions, inaccuracies, or misstatements will be sufficient causes for rejection of the Bid.

6. If the Bid is made under a fictitious name or business title, the actual legal name of the Bidder must be provided.

7. All bids shall include the documents identified on Attachment 1, Required Attachment Checklist. All attachments must include the information stated, and as instructed on each of the attachments (if applicable). Bids not including the proper required attachments may be deemed nonresponsive. A nonresponsive bid is one that does not meet the Bid requirements.

8. Bids must be submitted for the performance of all services described herein. Any deviation from the service specifications will not be considered and the Bid will be rejected.

9. A bid may be rejected if it is conditional or incomplete, or if it contains any alterations of form or other irregularities of any kind. SCO may reject any or all bids and may waive any immaterial deviation in a bid. SCO waiver of an immaterial deviation shall in no way modify the RFQ-ITS document or excuse the Bidder from full compliance with all requirements if awarded the Agreement.

10. All documents contained in the Bid requiring a signature must bear the original signature of a person authorized to bind the Bidder’s firm contractually.

11. An error in the Bid may cause the rejection of the Bid; however, SCO may correct obvious calculation errors at its sole option. If corrected, the Bidder will be provided the correction for validation.

G. Participation, Preference and Incentive Programs

The Preference and Incentive Programs listed below may be combined, but will not exceed a combined total of 15 percent of the Bid amount or $100,000 per bid, whichever is less. No bid price will be reduced by more than $100,000, and all preference and incentive cost adjustments are for bid evaluation purposes only and do not alter the actual cost offered by the Bidder.

A SB/MB and a DVBE must have current and valid certification through DGS, Office of Small Business and Disabled Veteran Business Enterprise Certification Services (OSDS). Completed certification applications and required support documents must be submitted to OSDS no later than 5:00 p.m. PT on the Final Date for Bid Submission and OSDS must be able to approve the application as submitted.

For certification and preference approval process information, contact OSDS by telephone at

(916) 375-4940 or access the OSDS Internet website at: https://www.dgs.ca.gov/PD/Services/Page- Content/Procurement-Division-Services-List-Folder/Certify-or-Re-apply-as-Small-Business-Disabled- Veteran-Business-Enterprise?search=Apply%20for%20SB%20Certification.

1. Disabled Veteran Business Enterprise Program

The DVBE Participation Program requirements for this solicitation have been waived. However, SCO is committed to achieving legislatively established goals for the participation of DVBEs and seeks to use certified DVBE business whenever possible. Therefore, SCO requests the Bidder’s voluntary participation in reporting any certified DVBEs that will be used in the performance of this agreement.

Each listed certified DVBE must perform a commercially useful function in the performance of the Agreement as defined in GC Section 14837(d)(4).

2. Disabled Veteran Business Enterprise Incentive

Firms that are DVBEs or are voluntarily utilizing DVBE subcontractors can have an incentive applied based on their level of DVBE participation identified in the Bid, not to exceed five percent. The DVBE Incentive is for bid computation purposes only and is only applied to responsive bids from responsible bidders proposing DVBE participation.

The incentive shall be applied as follows:

Confirmed DVBE participation of: Incentive Applied

5.0% or more 5%

4.0% to 4.99% 4%

3.0% to 3.99% 3%

2.0% to 2.99% 2%

1.0% to 1.99% 1%

a. The incentive is subject to a minimum of one percent and a maximum of five percent of the available cost. Bids with DVBE participation of more than five percent will be calculated with a five percent incentive.

b. The DVBE Incentive is computed from the lowest responsive and responsible bid price.

c. If the awarded contractor has a certified DVBE perform an element of work for the Agreement, within 60 days of expiration of the Agreement, the awarded contractor shall complete and submit to SCO a Prime Contractor’s Certification - DVBE Subcontractor Report (STD 817).

d. The required list of California certified DVBE subcontractors must be provided on Attachment 5, Bidder Declaration (Written) (GSPD-05-105) and must include the following: 1) subcontractor name;

2) address; 3) phone number; 4) a description of the work to be performed and/or products supplied; 5) and the dollar amount or percentage of the net bid price (as specified in the solicitation) per subcontractor.

3. Small Business Preference Program

Current law encourages state departments to first consider a SB/MB Enterprise for contracting opportunities. SCO is committed to supporting SB/MB participation in state contracting and seeks to use certified SBs/MBs whenever possible.

Section 14835, et seq., of the California GC requires that a five percent preference be given to bidders who certify as a SB/MB. The rules and regulations of this law are contained in Title 2, California Code of Regulations, Section 1896, et seq. A copy of the regulation is available upon request.

The SB/MB Preference may not exceed $50,000 for any bid. This preference cost adjustment is for bid evaluation purposes only and does not alter the actual cost offered by the Bidder.

4. Non-Small Business Preference Request

A five percent bid preference is available to a non-small business claiming 25 percent California certified SB subcontractor participation. If claiming the non-small business subcontractor preference, the Bid must include a list of the SB(s) with which you commit to subcontract in an amount of at least 25 percent of the net bid price with one or more California certified SBs. Each listed certified SB must perform a Commercially Useful Function in the performance of the Agreement as defined in GC Section 14837(d)(4).

The required list of California certified SB subcontractors must be provided on Attachment 5, Bidder Declaration (Written) (GSPD-05-105) and must include the following: 1) subcontractor name; 2) address; 3) phone number; 4) a description of the work to be performed and/or products supplied; 5) and the dollar amount or percentage of the net bid price (as specified in the solicitation) per subcontractor.

In granting the Non-Small Business Preference, no bid price will be reduced by more than $50,000.

This preference cost adjustment is for bid evaluation purposes only and does not alter the actual cost offered by the Bidder.

A non-small business is defined as a responsive/responsible bidder that is not certified by the DGS OSDS as a SB/MB enterprise.

5. Target Area Contract Preference Act (TACPA)

Preference will be granted to California-based contractors in accordance with GC Section 4530 whenever the contract for goods and services are in excess of $100,000 and the Contractor meets certain requirements as defined in the California Code (Title 2, Section 1896.30) regarding labor needed to produce the goods or provide the services being procured. Bidders wishing to take advantage of this preference will need to review the following website: Request Target Area Contract Preference and submit the appropriate response with the Bid.

NOTE: Bidders are not required to apply for the TACPA preference. Denial of TACPA preference requests is not a basis for rejection of the Bid. Agreements awarded with applied preferences will be monitored throughout the life of the Agreement for compliance to statutory, regulatory, and contractual requirements. SCO will take appropriate corrective action to apply sanctions as necessary to enforce performance programs.

H. Award and Protest

1. Award

a. Award of agreement, if made, will be in accordance with the RFQ-ITS information on evaluation to a responsible bidder whose bid complies with all the requirements of the RFQ-ITS documents and addenda thereto, except for such immaterial defects as may be waived by the State.

b. Award, if made, will be made within 45 days after the scheduled date for Agreement Award as specified in Section I, General Information, Section B, Key Action Dates; however, a bidder may extend the offer beyond 45 days in the event of a delay of agreement award.

c. Whenever an agreement is awarded under a procedure that provides for competitive bidding, but the Agreement is not to be awarded to the low bidder, the low bidder shall be notified by email five working days prior to the award of the Agreement.

d. Notice of the proposed award shall be posted for five working days prior to awarding the Agreement in a public place at SCO, 300 Capitol Mall, 15th Floor, Sacramento, CA 95814, and on the Small Business and Disabled Veteran Business Enterprises Advocate and Liaison page on the SCO website under Notice of Intent to Award Contract at:

https://www.sco.ca.gov/sco_sb_dvbe_advocate.html.

2. Protest

a. Any bidder’s issues regarding solicitation requirements must be resolved (or attempts to resolve them must have been made) before a protest may be submitted according to the procedure below.

These issues will first be resolved by the contact for the solicitation or if they result in a protest, the protest will be submitted to DGS Procurement Division Deputy Director to hear and resolve issues and whose decision will be final.

b. If a bidder has submitted a bid which it believes to be responsive to the requirements of the RFQ-

ITS and to be the bid that should have been selected according to the evaluation procedures in the solicitation and the bidder believes the State has incorrectly selected another bidder for award, the bidder may submit a protest of the selection as described below. Protests regarding selection of the “successful vendor” will be heard and resolved by the Victim Compensation and Government Claims Board whose decision will be final.

c. All protests of award must be made in writing, signed by an individual authorized to bind the bidder contractually and financially, and contain a statement of the reason(s) for protest; citing the law, rule, regulation or procedure on which the protest is based. The protester must provide facts and evidence to support the claim. Protests must be mailed or delivered to:

Street and Mailing Address:

Deputy Director Procurement Division 707 Third Street, Second Floor South West Sacramento, CA 95605 Facsimile No.: (916) 375-4611

d. All protests to the RFQ-ITS or protests concerning the evaluation, recommendation, or other aspects of the selection process must be received by the DGS Procurement Division Deputy Director as promptly as possible, but not later than the date indicated in the Notice of Intent to Award. Certified or registered mail must be used unless delivered in person, in which case the protester should obtain a receipt of delivery.

e. If any bidder, prior to the award of the Agreement, files a written protest with SCO and the DGS, Office of Legal Services (OLS), 707 Third Street, 7th Floor, Suite 7-330, West Sacramento, CA 95605, on the grounds that the (protesting) Bidder is the lowest responsive responsible bidder, the Agreement shall not be awarded until either the protest has been withdrawn or DGS has decided the matter.

f. Within five days after filing the protest, the protesting bidder shall file with DGS/OLS and SCO, a detailed written statement specifying the grounds for the protest. The written protest must be sent to DGS/OLS, 707 Third Street, 7th Floor, Suite 7-330, West Sacramento, CA 95605. A copy of the detailed written statement must be emailed to SCO at: admcpu@sco.ca.gov, Attention: SCO Contracts and Procurement Office.

SECTION II. EVALUATION INFORMATION

A. Evaluation Process

Bids to this RFQ-ITS will first be reviewed for responsiveness to all attachments. The Bid must meet all of the evaluation criteria identified in Section II. Evaluation Information, Item B. Evaluation Criteria. If a bid is missing required information, it may be deemed nonresponsive and subject to disqualification. Further review is subject to SCO discretion.

Award of an agreement resulting from this RFQ-ITS will be awarded to the responsive, responsible bidder with the lowest cost after the application of any preference requirements or incentives as applicable.

B. Evaluation Criteria

The overall responsiveness of each bid is based on the complete bid from the Bidder to the RFQ-ITS requirements. The following three subsections and criteria will be reviewed:

1. Administrative Requirements (Pass/Fail)

Bids will first be reviewed for responsiveness to the Administrative Requirements to include all required attachments listed on Attachment 1, Required Attachment Checklist to determine completeness of required documentation and compliance as identified in this RFQ-ITS. If a bid is missing information required in the Administrative Requirements, it may be deemed nonresponsive, and will therefore be ineligible for further consideration.

Administrative Requirements will be evaluated on a “pass/fail” basis for all criteria and information. SCO may reject any or all bids that fail to meet these requirements. For bids that pass the Administrative Requirements, the cost will be evaluated.

2. Cost

Completion of Attachment 14, Cost Worksheet

Cost Worksheets will be reviewed to verify mathematical accuracy and determine if there are any deviations in the Bid. If a deviation is material, it may be cause for rejection. Immaterial deviations will be processed as if no deviation had occurred. Cost Worksheets shall be evaluated and scored based on the total cost.

3. Participation, Preference, and Incentive Programs (as applicable)

DESCRIPTION PASS FAIL

Administrative Requirements

Bid received by date/time specified in Section I, Item B., Key Action Dates

Bid email received in PDF format

Attachment 1, Required Attachment(s) Checklist and all required/applicable attachments listed on it received

COST

Bidder’s Cost

PARTICIPATION, PREFERENCE AND INCENTIVE PROGRAMS (as applicable)

Maximum Percent

Actual Percent Applied

Small Business Preference* 5% DVBE Incentive* Up to 5% Non-Small Business Preference 5% Target Area Contract Preference Act Up to 9%

Total Applied Preference and/or Incentive Amounts TBD

Adjusted Cost for Evaluation Purposes** Calculated Cost

* To be determined upon evaluation.

** After application of Preference and Incentive.

C. Tie Break Process

In the event of a precise tie, if GC Section 14838(f) does not apply to the Bidders, a witnessed coin toss will be conducted by the Procurement Official. If a coin toss is needed, the Procurement Official will schedule and arrange for the coin toss and non-partisan witnesses, subsequently notifying the participating bidders of the outcome of the coin toss

ATTACHMENT 1

REQUIRED ATTACHMENT CHECKLIST

Bidder’s Name: _____________________________________________________________ (Please print clearly or type)

A complete bid will consist of the required items identified below. Please initial in the “Submitted to SCO” next to each item that you are submitting to SCO. For your bid to be responsive, all required attachments must be returned. Further review is subject to SCO discretion. This checklist must be signed and returned with your bid package.

Requirement Description Submitted to SCO

Attachment 1 Required Attachment Checklist

Attachment 2 Bidder Certification Sheet

Attachment 3 Contractor Point of Contact

Attachment 4 Payee Data Record (STD 204) and Payee Data Record Supplement

(STD 205)*

Attachment 5 Bidder Declaration (Written) (GSPD-05-105)

Attachment 6 Disabled Veteran Business Enterprise (DVBE) Declarations (DGS PD 843)*

Attachment 7 Target Area Contract Preference Act Preference Request for Goods and Services Solicitations (STD 830)*

Attachment 8 Bidder’s Summary of Contract Activities and Labor Hours (DGS PD 526)*

Attachment 9 Bidding Preferences and Incentives

Attachment 10 Acknowledgement of Contract Exhibits and Policies

Attachment 11 California Civil Rights Laws Certification (DGS OLS 04)

Attachment 12 Contractor/Consultant Confidentiality and Non-Disclosure Acknowledgement (ISO-004b)

Attachment 13 Contractor/Consultant Organization Information Security Agreement

(ISO-004c)

Attachment 14 Cost Worksheet

Additional Requirement

California Certified Small/Micro Business and/or DVBE Certification*

Additional Requirement

Copy of valid California city or county business license (if applicable); or, an affidavit that the business is in good standing with the state, province, or country in which business is headquartered.

* Submit only if applicable.

Authorized Signature and Title

Date

ATTACHMENT 2

BIDDER CERTIFICATION SHEET

Complete and return this attachment with the Bid package. An individual who is authorized to bind the bidding firm contractually shall sign the RFQ-ITS Attachment 2, Bidder Certification Sheet. The signature must indicate the title or position that the individual holds in the firm. The Bidder certifies the following:

1. Our all-inclusive cost is submitted as detailed in Attachment 14, Cost Worksheet.

2. All required attachments are included with this certification sheet.

3. The bid provided meets all Administrative Requirements detailed in Section II. Evaluation Information.

4. The signature affixed hereon and dated certifies compliance with all the requirements of this bid document. The signature below authorizes the verification of this certification. An unsigned bidder certification sheet may be cause for rejection.

1. Company Name 2. Telephone

Number 2a. Fax Number

3. Address

Indicate your organization type:

4. Sole Proprietorship 5. Partnership 6. Corporation 7. Limited Liability Co.

(LLC) Indicate the applicable employee and/or corporation number:

8. Federal Employee ID No. (FEIN) 9. California Corporation No.

10. Indicate applicable license and/or certification information:

11. Bidder’s Name (Print) 12. Title

12. Signature 14. Date

15. Are you certified with the Department of General Services (DGS), Office of Small Business and Disabled Veteran Business Enterprise Services (OSDS) as:

a. California Small Business

Yes No If yes, enter certification number:

b. Disabled Veteran Business Enterprise Yes No

If yes, enter your certification number below:

NOTE: A copy of your certification is required to be included if either of the above items is checked Yes.

Date application was submitted to OSDS, if an application is pending:

COMPLETION INSTRUCTIONS FOR BIDDER CERTIFICATION SHEET

Complete the numbered items on the Bidder Certification Sheet by following the instructions below.

Item Numbers Instructions

1, 2, 2a, 3 Must be completed. These items are self-explanatory.

4 Check if your firm is a sole proprietorship. A sole proprietorship is a form of business in which one person owns all the assets of the business in contrast to a partnership and corporation. The sole proprietor is solely liable for all the debts of the business.

5 Check if your firm is a partnership. A partnership is a voluntary agreement between two or more competent persons to place their money, effects, labor, and skill, or some or all of them in lawful commerce or business, with the understanding that there shall be a proportional sharing of the profits and losses between them. An association of two or more persons to carry on, as co-owners, a business for profit.

6 Check if your firm is a corporation. A corporation is an artificial person or legal entity created by or under the authority of the laws of a state or nation, composed, in some rare instances, of a single person and his successors, being the incumbents of a particular office, but ordinarily consisting of an association of numerous individuals.

7 Check if your firm is a limited liability company (LLC). An LLC is a business entity comprised of one or members owning a certain share of the company. It generally offers liability protection similar to that of a corporation but is taxed differently.

8 Enter your federal employee tax identification number.

9 Enter your corporation number assigned by the California Secretary of State’s Office. This information is used for checking if a corporation is in good standing and qualified to conduct business in California.

10 Complete, if applicable, by indicating the type of license and/or certification that your firm possesses and that is required for the type of services being procured.

11, 12, 13, 14 Must be completed. These items are self-explanatory.

15 If certified as a California SB, place a check in the "Yes" box, and enter your certification number on the line. If certified as a DVBE, place a check in the "Yes" box and enter your service code on the line. If you are not certified to one or both, place a check in the "No" box. If your certification is pending, enter the date your application was submitted to OSDS.

ATTACHMENT 3

CONTRACTOR POINT OF CONTACT

Complete and return this attachment with the Bid.

The contact person regarding this RFQ-ITS is:

Name & Title:

Address:

Phone Number:

Fax

Number:

Cell Phone

(optional)

Email:

If awarded agreement, the Project Manager for services will be:

Address:

Phone Number:

If awarded agreement, direct all contract inquiries to:

Address:

Phone Number:

If awarded agreement, the name of the company officer authorized to sign the Contract is:

Address:

ATTACHMENT 4

PAYEE DATA RECORD (STD 204) AND PAYEE DATA RECORD SUPPLEMENT (STD 205)*

Payee Data Record (STD 204) is required and must be submitted.

https://www.documents.dgs.ca.gov/dgs/fmc/pdf/std204.pdf

*Only use Payee Data Record Supplement (STD 205) to provide a remittance address if different from the mailing address for information returns, or to make subsequent changes to the remittance address.

https://www.documents.dgs.ca.gov/dgs/fmc/pdf/std205.pdf

ATTACHMENT 5

BIDDER DECLARATION (Written) (GSPD-05-105)

All bidders must complete and sign the Bidder Declaration (Written) (GSPD-05-105) and include it with the Bid.

When completing the declaration, bidders must identify all subcontractors proposed for participation in the Agreement. Bidders awarded the agreement are contractually obligated to use the subcontractors for the corresponding services identified unless SCO agrees to a substitution, and it is incorporated by amendment to the Agreement.

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd05-105.pdf

ATTACHMENT 6

DISABLED VETERAN BUSINESS ENTERPRISE (DVBE) DECLARATIONS (DGS PD 843)*

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/pd_843.pdf

ATTACHMENT 7

TARGET AREA CONTRACT PREFERENCE ACT

PREFERENCE REQUEST FOR GOODS AND SERVICES SOLICITATIONS (STD 830)*

https://www.documents.dgs.ca.gov/dgs/fmc/pdf/std830.pdf

ATTACHMENT 8

BIDDER’S SUMMARY OF CONTRACT ACTIVITIES AND LABOR HOURS (DGS PD 526)*

https://www.documents.dgs.ca.gov/dgs/fmc/gs/pd/gspd0526.pdf

*Submit only if applicable.

NOTE: The fill and print forms are available at the links provided. Please email admcpu@sco.ca.gov if you are unable to access the links provided. Attachments 4 and 5 must be submitted with the Bid.

ATTACHMENT 9

BIDDING PREFERENCES AND INCENTIVES

THE BIDDER MUST CHECK THE APPROPRIATE BOX FOR ALL SECTIONS BELOW AND SUBMIT WITH

THEIR BID.

1. SMALL BUSINESS PREFERENCE AND INCENTIVE:

☐ I am a DGS certified Small Business and claim the Small Business Preference. My DGS

Small Business certification number is: _______________Expiration Date: __________

☐ I am not a DGS certified Small Business, but 25 percent or more of the revenue from the award will go to DGS certified Small Business subcontractors performing a Commercially Useful Function and therefore I am claiming the incentive.

Bidder must complete and submit Attachment 5: Bidder Declaration (Written) (GSPD-05-105), indicating the percentage of the revenue that will be received by each DGS certified Small Business subcontractor.

☐ I am not claiming the DGS Small Business Preference or Incentive.

2. DVBE INCENTIVE:

☐ I am a DGS certified DVBE. A copy of my DGS PD 843 form is attached.

☐ I am not a DGS certified DVBE, but a percentage of the revenue will be going to DGS certified DVBE Subcontractors performing a Commercially Useful Function, and therefore I am claiming the DVBE incentive.

Bidder must submit a complete Attachment 5: Bidder Declaration (Written) (GSPD-05-105), indicating the percentage of the revenue that will be received by each DGS certified DVBE subcontractor. Bidder must also submit an Attachment 6, DVBE Declarations (DGS PD 843), for each DVBE subcontractor, signed by the DVBE owner/manager.

☐ I am not claiming the DVBE Incentive.

3. TACPA PREFERENCE:

☐ I am claiming the TACPA preference.

Bidder must submit a completed Attachment 7 Target Area Contract Preference Act Preference Request for Goods and Services Solicitations (STD 830), Attachment 8 Bidder’s Summary of Contract Activities and Labor Hours (DGS PD 526) and attach the DGS approval.

☐ I am not claiming the TACPA preference.

Name of Bidder:

Signature and Date:

ATTACHMENT 10

ACKNOWLEDGEMENT OF CONTRACT EXHIBITS

Complete and return a signed copy of this attachment with the Bid.

Exhibit Name

Exhibit A – Scope of Work

Exhibit B – Budget Detail and Payment Provisions

Exhibit B – Attachment 1, Cost Worksheet

Note: Attachment 14, Cost Worksheet to be inserted upon agreement award

Exhibit C – Information Technology

General Provisions – Information Technology

Cloud Computing – Software as a Service (SaaS)

Cloud Computing SaaS General Provisions

The Bidder acknowledges their ability to meet the following as required in Sample Agreement, Exhibit A, Scope of Work:

I certify that we have received, reviewed, and accepted all requirements in this RFQ-ITS, Sample Agreement and Exhibits.

Authorized Signature Date

Name of Contractor Firm

Name and Title (Please Print)

ATTACHMENT 11

CALIFORNIA CIVIL RIGHTS LAWS CERTIFICATION (DGS OLS 04)

Pursuant to Public Contract Code Section 2010, if a bidder or proposer executes or renews agreement contract over $100,000 on or after January 1, 2017, the Bidder or proposer hereby certifies compliance with the following:

1. CALIFORNIA CIVIL RIGHTS LAWS: For contracts over $100,000 executed or renewed after January 1, 2017, the Contractor certifies compliance with the Unruh Civil Rights Act (Section 51 of the Civil Code) and the Fair Employment and Housing Act (§12960 of the GC); and

2. EMPLOYER DISCRIMINATORY POLICIES: For contracts over $100,000 executed or renewed after

January 1, 2017, if a contractor has an internal policy against a sovereign nation or peoples recognized by the United States government, the Contractor certifies that such policies are not used in violation of the Unruh Civil Rights Act (Section 51 of the Civil Code) or the Fair Employment and Housing Act (Section 12960 of the GC).

CERTIFICATION

I, the official named below, certify under penalty of perjury under the laws of the State of California that the foregoing is true and correct.

Proposer/Bidder Firm Name (Printed)

Federal ID Number

By (Authorized Signature)

Printed Name and Title of Person Signing

Date Executed Executed in the County and State of

State of California—Controller’s Office

CONTRACTOR / CONSULTANT CONFIDENTIALITY

AND NON-DISCLOSURE ACKNOWLEDGEMENT

ISO-004b (Rev. 02/15)

300 Capitol Mall, Suite 603 Sacramento, CA 95814 Form Contact Info. Ph: (916) 445-1720 Email: infosec@sco.ca.gov

Section 1 — Contractor Information Contractor / Consultant Organization Name Date of Request

Contractor / Consultant Name (First M.I. Last) Work Phone

Title Work Email Address

Section 2 — Agreement

As a contractor or consultant of the California State Controller's Office (SCO) you may have access to financial, statistical, personal, or technical information classified as confidential or sensitive by the SCO. In addition you may be authorized access to data processing resources that are created, maintained, or used within the SCO and must be protected. This confidentiality and non-disclosure agreement between you and the SCO is to protect the information assets that may be disclosed to you by the SCO. This Agreement shall be construed under the laws of the State of California.

By signing below I acknowledge that:

1. I will access or use SCO information assets only when relevant and necessary in the ordinary course of performing my authorized official duties conducted on behalf of the organization referenced in this document. I further understand that unauthorized access, attempted access or illegal use of any computer systems, information asset, and/or information of the State of California may be a public offense punishable under Section 502 of the California Penal Code;

2. I will not disclose SCO information classified as confidential or sensitive unless authorized to do so by the SCO;

3. I will immediately notify the SCO Information Security Office; SCO Information Systems Division; and the appropriate SCO contract / agreement administrator of any violation of SCO administrative policy or information security standards; or violation of requirements, terms, or conditions of this agreement; and any actual or suspected information security incidents;.

4. I will not disclose, change, modify, delete, or circumvent any SCO required authentication and authorization process without the approval of authorized SCO personnel;

5. I will not change, modify, remove, or circumvent any SCO required security controls or protocols without written approval of SCO Information Systems Division management and the SCO Chief Information Security Officer (CISO) or CISO designee;

6. I will ensure that all data processing resources (i.e., PCs, notebooks, laptops, servers, USB and flash drives, etc.) and other equipment (i.e., cellular phones, personal digital assistants (PDAs), audio or image recorders, etc.) I bring into SCO owned or leased facilities are approved by the SCO, and meet SCO information technology and information security acceptable use standards, and SCO Information Security Policy;

7. I shall only utilize and access SCO managed electronic mail and Internet access services while utilizing SCO provided data processing resources or networks. I will not connect to, or access, any non-SCO managed resource or service from within the SCO network or via any SCO data process resource without the approval of SCO Information Systems Division management and the SCO Chief Information Security Officer (CISO) or CISO designee; and,

8. I will comply with all applicable SCO administrative, technical, and information security policies and standards.

I have read and understand the responsibilities stated above and will comply with the SCO administrative and information security requirements and standards listed on this form. I acknowledge and agree to use SCO information assets in accordance with the terms outlined in this form. I understand that failure to comply with these responsibilities may result in immediate cancellation of authorization to use SCO information assets or disciplinary action in accordance with applicable laws and regulations or civil and criminal prosecution in accordance with applicable statutes.

By signing this form, I acknowledge that I have read, understand and agree to its contents and realize the penalties for non-compliance with its terms.

Section 3 — Approval Signature Legal Signature Date

Return completed acknowledgement to the SCO Information Security Office, 300 Capitol Mall, Suite 603, Sacramento, CA 95814

ATTACHMENT 12

State Controller's Office

State of California—Controller’s Office Contractor/Consultant Organization Information Security Agreement ISO-004c (Rev. 2/15)

300 Capitol Mall, Suite 603 Sacramento, CA 95814 Form Contact Info. Ph: (916) 445-1720 Email: infosec@sco.ca.gov

Section 1 — Contractor / Consultant Organization Contact Information Contractor / Consultant Organization Name

Street Address City State Zip Code

Organization Contact Name Title Work Phone Work Email

Section 2 — SCO Contract / Agreement Administrator Information SCO Division SCO Contract / Agreement Administrator Name

Title Work Phone Work Email Address

Section 3 — SCO Information Security Terms And Conditions Contractors and consultants authorized to use SCO information assets shall comply with all applicable SCO administrative policy and information security standards, and the terms, conditions, and requirements stated on this agreement. The intent of this agreement is to comply with California State Administration Manual (SAM) requirements (Ref. SAM § 5305.8 (2) e (1) et.al) and statute.

General Terms and Conditions:

1. SCO information assets shall only be accessed or utilized for SCO authorized business purposes;

2. All SCO authorized organization employees or agents shall sign an SCO provided “Confidentiality and Non-Disclosure Acknowledgement” prior to being granted access to, or use of, SCO information assets;

Contractor / Consultant Organization Responsibilities The Contractor / Consultant organization listed in Section I of this agreement agrees to comply with, implement, enforce, and monitor compliance with the following requirements:

3. The organization shall ensure that only SCO authorized organization employees or agents utilize SCO information assets. The organization is solely responsible for ensuring that authorized employees or agents are not security risks, and upon the SCO’s request, the organization will provide the SCO with any information reasonably necessary for SCO to evaluate security issues relating to any authorized employee or agent;

4. The organization shall ensure that all authorized organization employees or agents understand and adhere to SCO administrative policy and information security standards;

5. The organization shall immediately notify the SCO of any changes or withdrawals of their employees or agents authorized by the SCO to access or utilize SCO information assets;

6. The organization shall ensure that SCO authorized organization employees or agents take all reasonable and appropriate measures to protect the confidentiality, integrity, and availability of SCO information classified as confidential or sensitive, or as requiring protection by state or federal statute;

7. The organization shall ensure that SCO authorized organization employees or agents take all reasonable and appropriate measures to protect the confidentiality, integrity and availability of SCO data processing resources, specifically;

a. The organization and its employees or agents shall only access the SCO’s information, network, and network resources through SCO managed data processing resources and network connections;

b. The organization and its employees or agents shall not change, modify, delete, or circumvent the configuration of any provided SCO owned or leased data processing equipment without written approval of SCO Information Systems Division management and the SCO Chief Information Security Officer (CISO) or CISO designee;

c. The organization and its employees or agents shall not change, modify, delete, or circumvent any SCO required authentication and authorization process without the approval of authorized SCO personnel. All authentication credentials are classified as confidential and must be protected as such;

d. The organization and its employees or agents shall not change, modify, remove, or circumvent any SCO required network security controls or protocols without written approval of SCO Information Systems Division management and the SCO Chief Information Security…