Information Security & Privacy Exhibit.pdf

This Information Security & Privacy Exhibit document outlines the mandatory security and data protection requirements for vendors responding to the State of California's Cribl Suite Renewal procurement (RFB-IS-26200686, opportunity 1082508). The exhibit establishes comprehensive security controls, encryption standards, incident response procedures, and breach notification protocols that contractors must implement and maintain throughout the contract term. Bidders are required to demonstrate compliance with these information security standards and must submit evidence of their security posture prior to contract award. The solicitation includes mandatory insurance requirements, with contractors obligated to maintain liability coverage specifically addressing data breaches and cyber incidents to protect the State against information security risks.

The Information Security & Privacy requirements represent critical compliance obligations for all prospective vendors competing for this brand-only Cribl Suite renewal contract. Contractors must substantiate their ability to meet California's risk management standards and implement required security controls as a condition of contract award. These security and privacy provisions apply regardless of vendor size, business classification, or set-aside status, and failure to demonstrate adequate information security capabilities may result in proposal rejection. The exhibit functions as a binding attachment to the RFB and establishes the baseline security posture expected throughout the contract performance period.