ESBD_511230_1778160054528_696-IG-26-O012 A-001 05-06-26.docx

This is an Amendment of Solicitation issued by the Texas Department of Criminal Justice (TDCJ) Office of the Inspector General (OIG) on May 6, 2026, amending Request for Offers No. 696-IG-26-O012. The amendment updates the schedule for a cloud-based Records Management System (RMS) procurement for multi-jurisdictional law enforcement use. The RMS solution must include personnel, hardware, software, training, licensing, implementation, storage, and support services with capabilities for criminal and administrative case management, evidence and property tracking, field reporting, records search and retrieval, workflow automation, access control, report generation, and advanced analytics. The pre-proposal conference is scheduled for May 11, 2026, at 10:00 a.m. CT via Microsoft Teams. The deadline for written questions is May 15, 2026, at 12:00 p.m. CT, with responses expected on May 22, 2026. Responses are due by June 1, 2026, at 3:00 p.m. CT via the Bonfire Submission Portal, with service commencement on November 1, 2026, and full implementation by August 31, 2027. The contract consists of a one-year base period from September 1, 2026, through August 31, 2027, with four optional one-year renewal periods extending through August 31, 2031, for a potential five-year duration.

Evaluation criteria weight cost at 40 percent and technical capability at 60 percent of the final score, with the Department anticipating award of one firm fixed-price contract based on best value. Respondents must demonstrate a minimum of five years of experience in the requested project work and possess $2,000,000 in cybersecurity insurance coverage. Compliance with FBI CJIS Security Policy, NIST guidelines, and Texas Risk and Authorization Management Program (TX-RAMP) Level 2 certification is mandatory. Respondents must submit a Historically Underutilized Business (HUB) Subcontracting Plan with uniform HUB goals of 3.00 percent across all contract categories and demonstrate good faith efforts to utilize State of Texas certified HUB vendors. Submission requirements include two years of financial statements, evidence of insurance coverage, service agreements if applicable, and proof of compliance with cybersecurity training, E-Verify verification, and foreign adversary restrictions. The RMS must maintain 99 percent system uptime, user response times not exceeding three seconds 98 percent of the time, and an eight-hour disaster recovery restoration window with a one-hour Recovery Point Objective. Performance penalties apply for security incidents not reported within six hours (10% invoice deduction), unresolved incidents beyond 30 hours (15% deduction), critical system defects unresolved within eight hours (5% per defect), and system downtime exceeding 1 percent monthly (10% deduction).