RFP 170-4506-26 SWIFT Assessment_FINAL.docx
DOCX document 137 KB Posted
- Attached to
- SWIFT CSP Independent Assessment
- Solicitation number
- S-17000-00017697
- Issued by
- Oregon
About this file
This Request for Proposal (RFP 170-4506-26) is issued by the Oregon State Treasury for a SWIFT Customer Security Programme (CSP) Independent Assessment. The Treasury seeks a qualified and SWIFT-certified independent assessor to conduct a comprehensive assessment of the Treasury's compliance with mandatory controls defined in the SWIFT Customer Security Controls Framework (CSCF) and to deliver a formal assessment report and signed SWIFT Completion Letter. The assessment will evaluate Treasury-owned SWIFT security controls including governance, logical access, network and perimeter security, incident response, and vendor oversight, while appropriately relying on third-party attestations provided by BlackRock Aladdin for controls within that platform's operational responsibility. Treasury anticipates awarding a single contract with an initial term through December 31, 2028, with the option to renew in two-year increments. The proposal submission deadline is September 11, 2026 at 12:00 PM Pacific Time, with questions due by August 21, 2026 at 12:00 PM Pacific Time and answers provided by August 28, 2026 at 12:00 PM Pacific Time. Presentations or interviews are tentatively scheduled for the weeks of September 21 and/or September 28, 2026, with a Notice of Intent to Award anticipated around October 5, 2026.
Minimum qualification requirements include SWIFT CSP Certified Assessor listing in the official SWIFT CSP Certified Assessors Directory at proposal submission and throughout the contract term, current SWIFT CSP Assessor Certifications for the proposed lead assessor, completion of at least two SWIFT CSP Independent Assessments within the last 24 months, demonstrated experience assessing organizations utilizing third-party shared service platforms such as BlackRock Aladdin, and organizational independence in accordance with SWIFT's Independent Assessment Framework. Evaluation will be conducted on a 250-point scale including assessor qualifications (50 points), experience with SWIFT CSP assessments (50 points), assessment methodology and approach (40 points), project plan and timeline (30 points), experience with Architecture B assessments (20 points), references and past performance (10 points), and price proposal (50 points). Price proposals will be scored with the lowest receiving 50 points, the second lowest receiving 40 points, the third lowest receiving 30 points, and the fourth lowest receiving 20 points, with remaining proposals receiving no points. No pre-proposal conference will be held. Proposals must not exceed 20 pages (excluding cover page and exhibits), submitted in PDF or Microsoft Office formats, and emailed to purchasing@ost.state.or.us. Proposers must include current resumes for key personnel, a detailed assessment methodology aligned with SWIFT's Independent Assessment Framework, a redacted sample SWIFT CSP Assessment Report, and exceptions to the sample contract terms. Treasury may conduct additional rounds of competition including interviews or demonstrations, and a protest period of seven calendar days applies both before the request close date and after the Notice of Intent to Award is issued.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| RFP 170-4506-26 Attachment C Certification Sheet_FINAL.docx | DOCX document | |
| RFP 170-4506-26 Attachment G Responsibility Form_FINAL.docx | DOCX document | |
| RFP 170-4506-26 Attachment_E - Price Proposal_FINAL.xlsx | XLSX spreadsheet | |
| RFP 170-4506-26 Attachment D Reference Check Form_FINAL.docx | DOCX document | |
| RFP 170-4506-26 Attachment A Sample Contract_FINAL.docx | DOCX document | |
| RFP 170-4506-26 Attachment F COBID_FINAL.docx | DOCX document | |
| RFP 170-4506-26 Attachment B Disclosure Exemption Affidavit_FINAL.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Request for Proposal SWIFT CSP Independent Assessment
Contracting Entity: Oregon State Treasury Request Number: 170-4506-26
Open Date: August 6, 2026 Close Date: September 11, 2026
Single Point of Contact:
Joshua Woodmansee Senior Procurement Officer Oregon State Treasury 867 Hawthorne Ave SE Salem, OR 97301 purchasing@ost.state.or.us 503-378-6785
Oregon State Treasury 2 170-4506-26 DOJ Approved 1/22/19
Table of Contents
| 1. | General Information | 4 |
| A. | Oregon State Treasury | 4 |
| B. | Statutory Authority | 4 |
| C. | Single Point of Contact | 4 |
| D. | Public Notice | 5 |
| E. | Business Inclusion and Diversity | 5 |
| 2. | Procurement Information | 6 |
| A. | Introduction | 6 |
| B. | Program Overview | 6 |
| C. | Project Overview and Purpose | 6 |
| D. | Scope of Work | 6 |
| E. | Schedule | 7 |
| F. | Protests | 8 |
| 3. | Qualification Requirements | 9 |
| A. | Minimum Qualification | 9 |
| B. | Licensing and Certification Requirements | 9 |
| 4. | Proposal Requirements | 10 |
| A. | Format, Quantity, and Delivery | 10 |
| B. | General Requirements | 11 |
| C. | Information and Certification Sheet | 11 |
| D. | Public Records and Exemptions | 11 |
| E. | References | 12 |
| F. | Price Proposal | 12 |
| G. | Key Persons and Resumes | 12 |
| H. | Project Implementation Plan | 13 |
| I. | Sample Contract Exceptions | 13 |
| 5. | Solicitation Process | 14 |
| A. | Pre-Proposal Conference | 14 |
| B. | Questions/Requests for Clarification | 14 |
| C. | Modification or Withdrawal | 14 |
| D. | Cancellation and Rejection of Proposal | 14 |
| E. | Responsiveness Determination | 15 |
| F. | Responsibility Determination | 15 |
| 6. | Evaluation | 16 |
| A. | General Requirements | 16 |
| B. | Evaluation Criteria | 16 |
| C. | Point and Score Calculation | 17 |
| D. | Price Proposal Evaluation | 17 |
| E. | Proposal Ranking | 18 |
| F. | Next Step Determination | 18 |
| G. | Subsequent Round Scoring | 18 |
| 7. | Award and Negotiation | 19 |
| A. | Award Consideration | 19 |
| B. | Notice of Intent to Award | 19 |
| C. | Additional Information Requirements | 19 |
| D. | Contact Negotiation | 20 |
| E. | Governing Laws and Regulations | 21 |
| F. | Cost of Submitting Proposal | 21 |
| G. | Statewide E-waste/Recovery | 21 |
| H. | Printing, Binding, and Stationary | 21 |
| 8. | Definitions | 22 |
General Information Office of the State Treasurer and the Oregon State Treasury
The Office of the State Treasurer and the Oregon State Treasury strive to save taxpayers money and earn strong and sustainable risk-adjusted returns on investments. The Treasurer seeks to provide the highest value by improving the financial health of the state and Oregonians by being efficient, transparent, and accountable.
The Treasury is the state’s financial-services hub and manages an array of responsibilities including the investment of public funds and trust funds, issuing state bonds, providing financial and banking services to state agencies, and protecting public funds. The Treasurer also administers the Oregon 529 Savings Network and the Oregon Retirement Savings Plan, the Oregon Unclaimed Property Program and the Oregon Estate Administration Program, and provides staffing services to the Oregon Investment Council.
Statutory Authority The Oregon State Treasury (“Treasury” or “Agency”) is coordinating the solicitation on behalf of the Oregon State Treasury, which may purchase and contract for goods and services under ORS 279A.050.
Single Point of Contact If you have any questions related to this Request, you may only contact:
Joshua Woodmansee Senior Procurement Officer 867 Hawthorne Ave SE Salem, OR 97301 purchasing@ost.state.or.us 503-378-6785
If you send questions to any other Treasury employee, your proposal may be rejected.
Public Notice The Request and attachments are published in the State of Oregon’s electronic procurement system OregonBuys at https://oregonbuys.gov/. Documents will not be mailed to prospective Proposers.
Treasury may modify this Request by publishing a written Addenda to OregonBuys. You are solely responsible for checking OregonBuys to determine whether any Addenda have been issued. All published Addenda are hereby incorporated into this Request by reference.
Business Inclusion and Diversity Treasury encourages the participation of small businesses, certified by the Oregon Certification Office for Business Inclusion and Diversity (COBID). This includes certified small businesses in the following categories: disadvantaged business enterprise, minority-owned business, woman-owned business, a business that a service-disabled veteran owns or an emerging small business. Treasury also encourages joint ventures or subcontracting with certified small business enterprises. For more information, visit:
https://oregon4biz.diversitysoftware.com/FrontEnd/VendorSearchPublic.asp?XID=6787&TN=oregon4biz
Procurement Information
1. Introduction Treasury is using the Competitive Sealed Proposal method under OAR 170-002-0145, ORS 279B.060. Treasury is soliciting proposals from qualified and SWIFT‑certified independent assessors to perform the SWIFT Customer Security Programme (CSP) Independent Assessment for the Oregon State Treasury. The assessment will confirm Treasury’s compliance with the mandatory controls defined in the SWIFT Customer Security Controls Framework (CSCF) and will result in a formal assessment report and a SWIFT‑required signed Completion Letter. Treasury uses the SWIFT network through BlackRock’s Aladdin platform, and therefore the assessment will focus primarily on controls owned by Treasury while appropriately relying on documentation and attestations provided by BlackRock for controls that fall within the Aladdin environment.
Treasury anticipates the award of one contract to a single proposer from this RFP.
The initial term of the Contract is anticipated to go through December 31, 2028, with an option to renew in 2-year increments.
Program Overview Oregon State Treasury (Treasury) is a SWIFT member and maintains its own SWIFT BIC, through which all SWIFT network traffic is processed and billed directly by SWIFT. BlackRock’s Aladdin platform generates and routes Treasury’s SWIFT messages as part of configured workflows and provides SOC reports and SWIFT Shared Infrastructure Programme attestations for controls that fall under their operational responsibility. Treasury is initiating this competitive procurement to secure a certified assessor capable of conducting a fully compliant Independent Assessment under the SWIFT Independent Assessment Framework.
Project Overview and Purpose Treasury participates in the SWIFT network under its own BIC and relies on BlackRock’s Aladdin platform to generate and route SWIFT messages as part of its operational workflows. While Aladdin provides SOC reports and SWIFT Shared Infrastructure Programme attestations for controls under their responsibility, Treasury remains accountable for compliance with the SWIFT Customer Security Programme (CSP) and must submit an annual attestation supported by an Independent Assessment.
Beginning in the 2025 update to the Customer Security Controls Framework (CSCF), SWIFT introduced changes that significantly expanded expectations for independent validation, including strengthened guidance under the Independent Assessment Framework (IAF). Although Treasury did not receive a direct requirement from SWIFT mandating an external assessment this cycle, Treasury has elected to retain an external, SWIFT‑certified assessor to ensure alignment with the updated CSP requirements, reinforce control assurance, and maintain industry best practices.
The purpose of this project is to obtain a qualified, SWIFT‑certified Independent Assessor to conduct a comprehensive assessment of Treasury‑owned controls, appropriately apply reliance on third‑party attestations provided by BlackRock, and produce all required outputs—including the Independent Assessment Report and the Completion Letter—needed to support Treasury’s 2025/2026 CSP attestation.
Scope of Work
1. Scope Clarity
1.1 In Scope SWIFT Components
The Independent Assessment shall cover all Treasury owned SWIFT security controls applicable under the SWIFT Customer Security Controls Framework (CSCF). These include, but are not limited to:
· Governance and security management controls
· Logical access and authentication controls for Treasury managed systems
· Network and perimeter security controls within Treasury’s operational environment
· Incident response controls
· Vendor and third party oversight related to SWIFT usage
· Any Treasury managed infrastructure, applications, or processes that directly support SWIFT connectivity or message initiation/receipt
1.2 Out of Scope / Covered by BlackRock Aladdin and Other Third Parties The following components are not to be independently tested by the assessor because they fall under the operational responsibility of BlackRock/Aladdin or other external providers:
· All SWIFT interface components owned and operated by BlackRock/Aladdin
· SWIFT infrastructure components covered under BlackRock’s SOC reports or SWIFT Shared Infrastructure Programme (SIP) attestations
· Controls where SWIFT permits reliance on third party attestations under the Independent Assessment Framework (IAF) Treasury will provide the assessor with all applicable third party SOC reports and attestations.
1.3 Reliance Requirements
The assessor must evaluate whether reliance is acceptable under SWIFT’s Independent Assessment Framework (IAF), including:
· Whether the prior assessment or attestation references the correct CSCF version;
· Whether evidence is recent enough to qualify under IAF recency rules;
· Whether changes in Treasury’s architecture or the Aladdin environment impact control conclusions.
Any control not meeting IAF reliance criteria must undergo full testing.
2. Deliverables
2.1. Independent Assessment Report
The assessor must deliver a full CSP Independent Assessment Report that conforms to SWIFT IAF Section 7.1 requirements. At minimum, the report must include:
· Assessment scope and components evaluated
· Identification of personnel involved
· Control by control compliance conclusions
· Description of tests performed and evidence evaluated
· Rationale supporting each conclusion
· Documentation of any defects, gaps, or exceptions
· Summary of reliance used and justification under IAF.
The report must be suitable for Treasury’s annual SWIFT CSP attestation submission.
2.2. SWIFT Completion Letter
The assessor shall provide a formally signed **SWIFT CSP Completion Letter**, certifying:
· The assessment was performed under the Independent Assessment Framework
· All mandatory controls were assessed
· Conclusions are complete, accurate, and supported by evidence
2.3. Exit Meeting
The assessor must conduct a formal exit meeting to:
· Present key findings
· Review compliance conclusions
· Document any areas of disagreement
2.4. Evidence Handling Requirements
All materials collected or generated during the engagement must be:
· Stored securely
· Not transmitted to SWIFT or any external third party
· Returned or securely destroyed upon Treasury’s request
3. The following information will not be provided to the selected Proposer:
· Governance and security management controls
· Logical access and authentication controls for Treasury managed systems
· Network and perimeter security controls within Treasury’s operational environment
· Incident response controls
· Vendor and third party oversight related to SWIFT usage
· Any Treasury managed infrastructure, applications, or processes that directly support SWIFT connectivity or message initiation/receipt The Statement of Work is included in the Sample Contract (Attachment A).
Oregon State Treasury 6
DOJ Approved: 1/22/2019
Schedule The table below provides the specific date and time of, or deadline for, an event (Pacific time zones provided). If the date field is blank, then that event is not planned for this request.
Time Zone
| Event |
| Date |
| Pacific Time |
| Pre-Proposal Conference |
| N/A |
| N/A |
| Questions/Clarification Request |
| August 21, 2026 |
| 12:00 PM |
| Answers to Questions/Clarification |
| August 28, 2026 |
| 12:00 PM |
| Closing Date (Proposals Due) |
| September 11, 2026 |
| 12:00 PM |
Other Tentative Dates. The table below provides the approximate or tentative date of an event. If the date field is blank, then that event is not planned for this request.
| Event |
| Date |
| Presentations, Demonstrations, or Interviews (if needed) |
| Week of September 21 and/or September 28, 2026 |
| Issuance of Notice of Intent to Award |
| Approx. Week of October 5, 2026 |
Protests All protests must be made in writing in accordance with OAR 170-002-0300.
Protests must:
· Be delivered by email to the Single Point of Contact, or hand-delivered to the Single Point of Contact’s address during business hours (8 am to 5 pm; Monday through Friday).
· Include a reference to 170-4506-26.
· Include your name and contact information.
· Be submitted by your authorized representative.
· State the reason for the protest, including:
· The grounds that demonstrate how the Procurement Process is contrary to law; and
· Evidence or documentation that supports the grounds of your protest.
· State your proposed changes to the Request provisions or other relief sought.
Request Protest: Must be received by 12:00 PM Pacific Time, not less than seven calendar days prior to the Request Close Date.
Award Protest: Must be received by 12:00 pm Pacific Time, not less than seven calendar days after the Notice of Intent to Award is issued.
Treasury Response to Protest: Treasury will respond to all protests within a reasonable time and will issue a written decision to the Proposer who submitted the protest. Treasury will not consider any protest that is submitted after the deadline, or does not include the required information.
Qualification Requirements To qualify for further consideration, your Proposal must demonstrate how you meet all the requirements included in this section and its subsections.
1. Minimum Qualification Proposers must meet all of the following minimum requirements:
1. The firm must be listed in the official **SWIFT CSP Certified Assessors Directory** at the time of proposal submission and throughout the contract term.
2. The proposed lead assessor must hold current SWIFT CSP Assessor Certifications.
3. The firm must have performed at least **two (2)** SWIFT CSP Independent Assessments within the last **24 months**.
4. The firm must demonstrate experience assessing organizations that utilize **third party shared service platforms** such as BlackRock Aladdin or similar arrangements.
5. The firm must be independent of the Oregon State Treasury and its first line of defense, in accordance with SWIFT’s IAF independence requirements.
Licensing and Certification Requirements Proposers must provide the following documentation as part of their submission:
· SWIFT CSP Assessor Certifications for all personnel who will perform the assessment.
Pay Equity Certification. If your Proposal exceeds $500,000, and you employ 50 or more full-time employees, you must have a Pay Equity Compliance Certificate issued by Oregon Department of Administrative Services prior to executing a contract with Treasury.
Instructions on how to obtain the certificate can be found at the following web address: www.oregon.gov/das/Procurement/Documents/SB491PayEquity.pdf.
Nondiscrimination in Employment. As a condition of receiving the award of a Contract under this Request, you must certify that you have a policy and practice of preventing sexual harassment, sexual assault, and discrimination against employees who are members of a protected class. The policy and practice must include giving employees a written notice of a policy that both prohibits, and prescribes disciplinary measures for, conduct that constitutes sexual harassment, sexual assault, or unlawful discrimination. Your requirement is met by completing and signing the Proposer Information and Certification Sheet (Attachment C).
Proposal Requirements
1. Format, Quantity, and Delivery The following table applies to Proposals, Modifications, Withdrawals, and Protests. Email Delivery ONLY: You must provide the scanned or electronically generated original, signed Proposal. Proposals must be received by the Closing Date and time.
| Item |
| Requirement |
Number of Pages (excluding Cover Page and Exhibits) The following items do not count toward the page limit:
· Disclosure Exemption Affidavit (Attachment B)
· Proposer Information and Certification Sheet (Attachment C)
· Reference Check form (Attachment D)
· Price Proposal (Attachment E)
· COBID Certification / Outreach Plan (Attachment F)
· Responsibility Inquiry (Attachment G)
· Work samples
| Paper size |
| 8 ½ inches x 11 inches |
| Paper type |
| Recycled Paper |
| Minimum Font Size |
| Body Text: 11 point |
Table Text: 10 point Footnoted Text: 9 point
| Electronic File Format |
| Portable Document Format (PDF); Microsoft Word (docx); Microsoft Excel (xlsx) |
| Electronic proposal submissions |
| Emailed to purchasing@ost.state.or.us |
If the submission requires more than one email, then you must include the Request Number and identify it as first, second etc. in the chain of e-mails in the subject line on each email sent. Example: 170-1000-2026; Email #1
General Requirements Proposals must address each of the requirements included in this Request. You must describe the Goods to be provided or the Services to be performed or both as required in the Scope of Work. A Proposal that merely offers to provide the Goods or Services as stated in this Request may be considered non-Responsive and may not be evaluated further.
The terms of your Proposal, including pricing, are valid and binding for 120 days from the Closing Date.
Proposals containing unsolicited marketing or advertising material may not be scored favorably if specific information is difficult to locate.
Vendors (i.e., Proposer) shall use recyclable products to the maximum extent economically feasible in the performance of the contract work set forth in this document.
Information and Certification Sheet Your Proposal must include the Information and Certification Sheet (Attachment C) providing that you have complied with the tax laws of this state or a political subdivision of this state, including but not limited to ORS 305.620 and ORS chapters 316, 317 and 318. Your Proposal may be found non-Responsive if you fail to demonstrate compliance with Oregon Tax Laws or do not sign the Proposer Information and Certification Sheet.
Public Records and Exemptions Proposals are public records and are subject to public inspection after Treasury issues the Notice of the Intent to Award. Treasury will keep a list of all Proposers and will release the list when required. Treasury will not disclose Proposals until it has issued the Notice of Intent to Award. If you believe any information contained in your Proposal is exempt from disclosure under the Oregon Public Records law (ORS 192.311 through 192.478), you must submit a redacted version of your Proposal. You may only redact information that is exempt, and any redactions should not be overly broad. You must clearly identify the redacted version on the Cover Page. The naming convention used for the document should include the word “redacted” if your Proposal is submitted electronically.
You must also complete and submit the Disclosure Exemption Affidavit (Attachment B). If you fail to complete the affidavit, the Treasury will assume you do not believe information contained in the Proposal is exempt from disclosure. Application of the Oregon Public Records Law will determine whether any information is actually exempt from disclosure.
Your Proposal submitted under this Request becomes the Property of Treasury when received by the Single Point of Contact. By submitting a Proposal in response to this Request, you grant the State a non-exclusive, perpetual, irrevocable, royalty-free license for the rights to copy, distribute, display, prepare derivative works of and transmit the Proposal solely for the purpose of evaluating the Proposal, negotiating a Contract, if awarded to Proposer, or as otherwise needed to administer the Request process, and to fulfill obligations under Oregon Public Records Law. Proposals, including supporting materials, will not be returned to Proposer unless the Proposal is submitted late.
Strength of Organization & Experience Please provide details on the following:
· Provide a brief history of your firm.
· Number of years in this particular business.
· Describe the number and type of clients actively served (breakdown by industry).
· Proof of listing within the SWIFT CSP Certified Assessors Directory.
· Evidence of organizational authorization to provide SWIFT assessment services (such as accreditation letters or equivalent documentation).
Proposers must clearly describe their prior SWIFT CSP Independent Assessment work, emphasizing the number, scale, and complexity of assessments performed within the last 24 months. Proposers should highlight experience with organizations operating in shared‑service or outsourced environments—including BlackRock Aladdin or similar service providers—and explain how these engagements demonstrate their capability to assess Architecture B control boundaries and reliance structures.
References You must provide references from current or former clients for whom you performed similar projects by completing the Reference Check Form (Attachment D). At least **two (2)** references must be from clients for which similar CSP assessments were completed within the last **three (3)** years. References must be able to verify the quality of the work you performed.
Treasury may contact references you provide concerning your ability to comply with the requirements of this Request. Treasury may use references to obtain additional information, or verify any information needed. Treasury may contact any reference (submitted or not) to verify your qualifications.
Price Proposal You must complete the Price Proposal (Attachment E) and submit it in a separate sealed package contained within your sealed Proposal package. If submitting electronic files, the price information must be in a separate electronic file/document with the naming convention including the term “Attachment E”.
Key Persons and Resumes Your Proposal must identify any key persons you will assign to this project. You must include a current resume (not more than 2 pages) for each person that demonstrates qualifications and experience for the work they will perform.
Key Persons identified in the Proposal must be present for all subsequent rounds of competition, i.e. interviews, demonstrations, etc.
(Note: The number of pages for this response will be excluded when determining compliance with the 20-page maximum)
Project Implementation Plan You must describe how you would carry out the major activities, including an estimated timeline, described in the Scope of Work. The plan must demonstrate how you will coordinate and accomplish the work.
Assessment Methodology and Sample Report Proposer must include a narrative detailing their assessment methodology—specifically how they conduct testing, evaluate reliance on third‑party attestations, and ensure alignment with SWIFT’s Independent Assessment Framework. The materials submitted must provide sufficient clarity and specificity for Treasury to evaluate the Proposer’s rigor, approach, and reporting quality.
Proposers must also describe their experience assessing organizations operating in Architecture B environments—specifically those leveraging non‑SWIFT service providers such as BlackRock Aladdin—and explain how their methodology adapts to shared‑service or outsourced control structures.
In addition, Proposer must provide a redacted sample SWIFT CSP Assessment Report, or equivalent evidence, that clearly illustrates the structure, level of detail, and reporting format used in prior Independent Assessments. The sample should demonstrate how control testing results, evidence, conclusions, and any gaps or exceptions are documented.
Sample Contract Exceptions You must submit exceptions to terms and conditions of the Sample Contract (Exhibit A) with your Proposal. You may use standard revisions marking to document your exceptions. Treasury will consider the scope of requested revisions in its evaluation of your Proposal. The terms and conditions of the Sample Contract may be negotiated only as set forth in Section 7.D of this Request.
Solicitation Process
1. Pre-Proposal Conference A Pre-Proposal Conference will not be held for this Request.
Questions/Requests for Clarification Your questions or requests for clarification related to this Request must be emailed to the Single Point of Contact. You must:
· Reference the Request number
· Include your name and contact information, and
· Identify the specific area of the Request in question (page, section, and subsection number).
You must submit your questions or requests for clarification by August 21, 2026 12:00 PM Pacific Time.
Modification or Withdrawal You may modify your proposal. The modification must include the Request Number and be submitted to the Single Point of Contact prior to the Closing Date and time.
You may also withdraw your proposal by emailing written notice to the Single Point of Contact. The notice must include the Request Number and be submitted to the Single Point of Contact prior to the Closing Date and time.
Treasury will not consider a modification or withdrawal received after the Closing Date and time.
Cancellation and Rejection of Proposal Treasury may cancel this Request at any time if it is in the best interest of the Oregon State Treasury.
Treasury may reject one or more Proposals for any of the following reasons:
· Proposer fails to substantially comply with the requirements of this Request.
· A Proposal is non-Responsive.
· Proposer has liquidated and delinquent debt owed to the State or any department or agency of the State.
· Proposer fails to meet the responsibility requirements of ORS 279B.110.
· Proposer makes any contact regarding this Request with State representatives such as State employees or officials other than the Single Point of Contact, or inappropriate contact with the Single Point of Contact.
· Proposer attempts to influence a member of the Evaluation Panel.
· When rejection is in the best interest of the Office of the State Treasurer.
Responsiveness Determination Any Proposal received prior to the Closing Date may be reviewed to determine if it is Responsive to all Request requirements, including compliance with Section 3 of this Request. If a Proposal is unclear, the Single Point of Contact may request clarification from the Proposer. Seeking clarification will not be used to correct a non-Responsive Proposal. Treasury may waive mistakes under OAR 170-002-0170.
Responsibility Determination Treasury will determine if the preliminarily selected Proposer is Responsible prior to the Notice of Intent to Award being issued. The Single Point of Contact will email a Responsibility Inquiry Form. The selected Proposer must complete, sign, and return the form within 5 business days.
Evaluation
1. General Requirements Each Responsive Proposal meeting minimum requirements will be independently evaluated by members of an Evaluation Panel. Evaluation Panel members may change and Treasury may have additional or fewer evaluators for optional rounds of competition. Evaluators will assign a score for each evaluation criterion listed below in this section up to the maximum points available in the Point and Score Calculation section.
The Single Point of Contact may request further clarification to assist the Evaluation Panel in gaining additional understanding of a Proposal. A response to a clarification request must be to clarify or explain portions of the already submitted Proposal and may not contain new information not included in the original Proposal.
Evaluation Criteria
| Score |
| Criteria |
| 91 – 100 |
| OUTSTANDING – The Proposal meets all the requirements and has demonstrated in a clear and concise manner a thorough knowledge and understanding of the subject matter and project. The Proposer provides insight into its expertise, knowledge, and understanding of the subject matter. |
| 60 – 90 |
| VERY GOOD – The Proposal provides useful information, while showing experience and knowledge within the category. The Proposer demonstrates above average knowledge and ability with no apparent deficiencies noted. |
| 50-59 |
| ADEQUATE – The Proposal meets all requirements in an adequate manner. The Proposer demonstrates an ability to comply with guidelines, parameters, and requirements with no additional information put forth by the Proposer. |
| 1 – 49 |
| FAIR – The Proposal meets minimum requirements, but the Proposer does not demonstrate sufficient knowledge of the subject matter. |
| 0 |
| RESPONSE OF NO VALUE – An unacceptable Proposal that does not meet the requirements set forth in the RFP. The Proposer has not demonstrated knowledge of the subject matter. |
Point and Score Calculation Treasury will evaluate Proposals based on the criteria below. Each criterion reflects the skills, experience, and methodologies necessary to successfully perform a SWIFT CSP Independent Assessment in accordance with the Independent Assessment Framework (IAF).
| Evaluation Item |
| Possible Points |
Assessor Qualifications & Certifications (4.U) Demonstrated SWIFT CSP Assessor certification for key personnel; listing in the SWIFT CSP Certified Assessors Directory; relevant industry credentials.
Experience with SWIFT CSP Assessments (4.R) Number, scale, and relevance of previously completed CSP assessments, especially within the last 24 months; experience assessing organizations leveraging shared‑service environments such as BlackRock Aladdin.
Assessment Methodology & Approach (4.W) Clarity, rigor, and completeness of the proposed assessment methodology; alignment with SWIFT’s IAF; approach to reliance on third‑party attestations; evidence request processes and testing strategies.
Project Plan & Timeline (4.V) Quality and realism of the proposed schedule, staffing plan, communication expectations, evidence handling approach, and coordination with Treasury and BlackRock.
Experience with Architecture B Assessments (4.W) Demonstrated understanding nuances of architecture B assessments utilizing non-swift service providers. Including which controls are Treasury‑owned vs. service provider owned; applicability of planned testing.
References & Past Performance (4.S) Strength of reference checks for work of similar scope; verification of performance quality and reliability.
| Total Evaluation Points |
| 200 |
| Price |
| Possible Points |
| Price Proposal (4.T) |
| 50 |
| Total Evaluation and Price Points |
| 250 |
Round 2 Evaluation Item
| Interview (if Treasury elects to conduct an interview round) |
| 100 |
| Cumulative Evaluation Points |
| 350 |
Price Proposal Evaluation The sealed Price Proposals will be opened and scored as follows:
· The lowest Price Proposal will receive 50 points.
· The second lowest Price Proposal will receive 40 points.
· The third lowest Price Proposal will receive 30 points.
· The fourth lowest Price Proposal will receive 20 points.
· The remaining Price Proposals will not receive any points.
Proposal Ranking The Single Point of Contact will average the scores for each Proposal in a given round of competition (calculated by totaling the points awarded by each Evaluation Panel member and dividing by the number of members).
Treasury will rank all Proposers at the conclusion of the evaluation and scoring and may, in Treasury’s sole discretion, determine an apparent successful Proposer with no additional rounds of competition. If additional rounds are conducted, Treasury will rank advancing Proposers at the conclusion of each subsequent round and may determine an apparent successful Proposer at any time during the solicitation process.
The Single Point of Contact will combine the average score for each Proposal with Price Proposal score. The Single Point of Contact will describe the rank order for each Proposer, with the highest score receiving the highest rank, and successive rank order determined by the next highest score.
Next Step Determination At the conclusion of a round of competition, Treasury may choose to conduct an additional round(s) of competition if in its best interest. Additional rounds of competition may consist of, but will not be limited to:
· Interviews
· Presentations/Demonstrations/Additional Submittal Items
· Discussions and submittal of revised Proposals
· Serial or simultaneous negotiations
Treasury will select the location of any interview, demonstration, or other event, or may conduct the event via teleconference or videoconference.
Subsequent Round Scoring If Treasury conducts two or more rounds of competition, the Single Point of Contact will determine the cumulative score for each Proposal advancing through all rounds of competition by adding the scores from each completed round. The Proposal with the highest cumulative score will receive the highest final ranking.
Award and Negotiation
1. Award Consideration Treasury will award a contract to the highest-ranking Proposer that met all the requirements in this Request, and is Responsible. Treasury may award less than the full Scope of Work included in this Request.
Notice of Intent to Award Treasury will send a Notice of Intent to Award to all Proposers. The Notice of Intent to Award will include the name of the selected Proposer. A Proposer to this Request may submit a protest under subsection 2.F of this Request.
Treasury may immediately begin negotiations with a Proposer if only one Proposal was submitted. Treasury is not required to evaluate the single Proposal and may waive the protest period.
Additional Information Requirements The Proposer awarded a contract under this Request is required to submit the following additional information:
· Proof of insurance for the lines of coverage provided in Exhibit B of Attachment A.
· Taxpayer Identification Number (TIN) issued by the Internal Revenue Service.
· A completed W-9 form with backup withholder status.
· Proof of business registration and authority to transact business in the State of Oregon.
· A completed Responsibility Inquiry Form (Attachment G).
· Pay Equity Certification, if required. (See Section 3.B.)
· Nondiscrimination in Employment Certification (Attachment C).
· Certification by the Office for Business Inclusion and Diversity (COBID) Certification. (See Section 1.E.)
· Certified Disadvantaged Business Outreach Plan (Attachment F), if requested.
Contract Negotiation After selection of a successful Proposal, Treasury may enter into Contract negotiations with the successful Proposer. By submitting a Proposal, Proposer agrees to comply with the requirements of this Request, including the terms and conditions of the Sample Contract (Attachment A), with the exception of those terms listed below for negotiation.
Unless Treasury agrees to modify any of the terms and conditions pursuant to any exception(s) included in the original Proposal, Treasury intends to enter into a Contract with the successful Proposer that is substantially in the form of the Sample Contract (Attachment A) included in this Request.
It may be possible to negotiate some provisions of the final Contract; however, Treasury is not required to make any changes and many provisions cannot be changed. Proposer is cautioned that the State of Oregon believes modifications to the standard provisions constitute increased risk and increased cost to the State. Therefore, Treasury will consider the scope of requested exceptions in the evaluation of Proposal.
Any subsequent negotiated changes are subject to approval of the Oregon Department of Justice.
Treasury is willing to negotiate all items, except those listed below:
· Choice of law
· Choice of venue
· Constitutional requirements
· Requirements of applicable federal and State law
In the event that the parties have not reached mutually agreeable terms within 30 calendar days, Treasury may terminate negotiations and commence negotiations with the next highest-ranking Proposer.
If the Contract has potential subcontracting opportunities, Treasury may require the successful Proposer to submit a completed Certified Disadvantaged Business Outreach Plan (Attachment F) prior to execution.
Governing Laws and Regulations This Request is governed by the laws of the State of Oregon. The venue for any administrative or judicial action relating to this Request, evaluation and award is the Circuit Court of Marion County for the State of Oregon; provided, however, if a proceeding must be brought in a federal forum, then it must be brought and conducted solely and exclusively within the United States District Court for the District of Oregon. In no event shall this section be construed as a waiver by the State of Oregon of any form of defense or immunity, whether sovereign immunity, governmental immunity, immunity based on the eleventh amendment to the Constitution of the United States or otherwise, to or from any Claim or consent to the jurisdiction of any court.
Cost of Submitting Proposal Proposer must pay all the costs in submitting its Proposal, including, but not limited to, the costs to prepare and submit the Proposal, costs of samples and other supporting materials, costs to participate in demonstrations, or costs associated with protests.
Statewide E-waste/Recovery If the products included in a Proposal are electronic equipment, Proposer must include information in its Proposal that demonstrates compliance with the Statewide E-Waste/Recovery Procedure #107-011-050_PR. Visit the Department of Administrative Services website www.oregon.gov/das and use the search bar feature to locate the procedure.
Printing, Binding, and Stationary Except as provided in ORS 282.210(2), all printing, binding and stationery work, including the manufacture of motor vehicle registration plates and plates required to be affixed to motor carriers, for the State or any county, city, town, port district, school district, or other political subdivision, must be performed within the State.
Definitions Unless the context of a specific term requires otherwise, capitalized terms used in this Request and the attachments to this Request have the meaning as prescribed below:
| Term |
| Meaning |
| Authorized Representative |
| A person representing a Proposer who is authorized and an employee of the Proposer to make commitments and bind the Proposer to the terms and conditions of this Request for Proposal submitted on behalf of the Proposer. |
| Closing or Closing Date |
| The date and time specified in a Solicitation Document as the deadline for submitting a Proposal. |
| Contract |
| A contract for sale or other disposal, or a purchase, lease, rental or other acquisition, by Treasury of personal property, services, including personal services, public improvements, public works, minor alterations, or ordinary repair or maintenance necessary to preserve a public improvement. “Contract” does not include grants. |
| Exempt Information |
| Information that is or the Proposer believes is exempt from disclosure under Oregon’s Public Records Law. (See ORS 192.311 through 192.478). |
| Key Persons |
| The Authorized Representative, project manager and all other personnel designated to work on the Project under this Request. |
| ORS |
| Oregon Revised Statutes, which are laws enacted by the Oregon Legislative Assembly. |
| Person |
| A natural person capable of being legally bound, a sole proprietorship, a corporation, a partnership, a limited liability company or partnership, a limited partnership, an association, a business trust, or any other person with legal capacity to contract or a public body. |
Proposal A person’s offer made in response to the Request.
| Proposer |
| A person who submits a Proposal in response to the Request. |
| Request |
| All of the documents, whether attached or incorporated by reference under the Request for Proposal numbered 170-4506-26, used for soliciting proposals. |
| Responsibility |
| The standards of responsibility set forth in ORS 279B.110(2) and has not been debarred by the State that a Proposer must meet before entering into a contract with the State. |
| Responsible |
| A determination that a Proposer has met the standards of responsibility set for in ORS 279B.110(2) and has not been debarred by any state agency. |
| Responsive |
| A Proposal that substantially complies with the Request and all prescribed procedures and requirements. |
| Section |
| A distinct part or subdivision of the Request that identifies the contents of the information contained in that part or subdivision. A section is delineated by a number. |
| Subsection |
| A distinct part or subdivision of a Section of the Request that contains information related to the Section. A subsection is delineated by a letter. |
| Scope of Work |
| The description of the work to be performed that encompasses Treasury’s intentions with regards to contracting for work being performed. |
| State |
| The State of Oregon. |
| Treasury |
| The Oregon State Treasury, which is comprised of the staff carrying out the duties and obligations of the Oregon State Treasurer under ORS 178.050. |
You or Your The person who is considering submitting a Proposal under the Request.
Oregon State Treasury 7
Oregon State Treasury 22 image1.png image2.png
File details come from the government source that posted it. Updated .