RFB-IS-27200265 AMD#1.pdf

This amendment document pertains to a brand-only procurement by the State of California for Proofpoint email security software under RFB-IS-27200265. The procurement seeks email security solutions to protect state systems and communications, with proposals due October 30, 2026. Only Proofpoint products are eligible for consideration in this solicitation. Bidders must hold Certification of Business Enterprise (CBE) status and provide proof of vendor authorization to resell Proofpoint solutions. A Certificate of Insurance is required prior to award and must remain current throughout the contract term. The specific contract term duration and any renewal options will be determined upon contract award.

Bid submissions must include pricing documentation, proof of Proofpoint reseller authorization, completed Appendix A Purchasing Required Forms, CBE certification, insurance documentation, and compliance attestations. Vendors must comply with comprehensive Information Security and Privacy Requirements, including California Consumer Privacy Act (CCPA) compliance, multi-factor authentication, SOC 2 Type II or equivalent certifications, cyber liability insurance, and 24-hour breach notification protocols. Contractors are required to maintain audit logging, conduct regular vulnerability assessments, permit state security inspections and testing, and establish data retention and destruction protocols aligned with state records management standards. These requirements extend to all contractor personnel with system access and any subcontractors. Renewal options, specific funding amounts, and implementation timelines will be determined upon contract award, with all terms and conditions governed by California state procurement regulations.