RFP 25-182-PSC NERC CIP Compliance Evaluation and Roadmap.pdf

RFP 25-182-PSC 1 NERC CIP Compliance Evaluation and Roadmap

Eugene Water & Electric Board

REQUEST FOR PROPOSALS

for

NERC CIP Compliance Evaluation and Roadmap

RFP No.: 25-182-PSC Closing Date: Tuesday, October 28, 2025 Time: 2:00 PM PT

Description: EWEB seeks a qualified consultant with demonstrated NERC CIP expertise to provide technical consultation, analysis, and roadmap development to support compliance readiness.

Purchasing Contact: Wendy Lopez (541) 685-7150 wendy.lopez@eweb.org

Pre-Proposal Conference: None scheduled

This is a COMPETITIVE SEALED PROCUREMENT.

ELECTRONIC PROPOSALS SUBMITTED VIA THE OREGONBUYS BID SITE ARE REQUIRED. Emailed submittals will not be accepted.

To ensure your submission is received prior to the closing date and time, it is recommended that you begin the submittal process on the OregonBuys website at least 72-hours prior to the closing date and time listed above.

SINGLE POINT OF CONTACT: There will be only one point of contact for the entire Request for Proposal process. The contact point is the EWEB Purchasing Office, and the contact person is the Purchasing Contact listed above, unless otherwise stated. Any questions or issues that may arise regarding the specifications, bidding process, and/or the award process, shall be directed via email to the Purchasing Contact listed above. EWEB’s official response to any questions or requests will be in writing via the Addendum process.

FOR MORE INFORMATION please refer to Part 1 “Instructions to Proposers”

RFP 25-182-PSC 2 NERC CIP Compliance Evaluation and Roadmap

TABLE OF CONTENTS

Section Description Page

Legal Advertisement 3

1 Instructions to Proposers 4

2 Scope of Work 9

3 Minimum Qualification and Requirements 11

4 Evaluation Process & Contractor Selection 12

5 Evaluation Criteria 17

6 Proposal Form 19

EXHIBITS

1 Sample Contract

RFP 25-182-PSC 3 NERC CIP Compliance Evaluation and Roadmap

LEGAL ADVERTISEMENT

RFP #25-182-PSC

NERC CIP Compliance Evaluation and Roadmap

The Eugene Water & Electric Board (EWEB) requests proposals from consulting firms with demonstrated NERC CIP expertise to provide technical consultation, analysis, and roadmap development to support compliance readiness.

Proposals shall be submitted on the State of Oregon – OregonBuys website (https://oregonbuys.gov/bso/), before, 2:00 PM PT, Tuesday, October 28, 2025 (Emailed responses will not be accepted.) Proposals will not be accepted after this hour and date.

RFP documents may be obtained by downloading the RFP documents from the State of Oregon's bid site ("OregonBuys"): https://oregonbuys.gov/bso/. (On OregonBuys home page, search for bid #25-182-PSC For navigation help, please call 1-855-800-5046.)

All proposals shall be submitted as set forth in Section 1 - Instructions to Proposers. EWEB is not responsible for proposals submitted in any manner, format or to any delivery point other than as required by the Solicitation Document.

No proposal may be withdrawn after the hour set for the opening thereof until the elapse of sixty (60) days from the date and time set for opening.

EWEB reserves the right to waive any or all informalities and irregularities (EWEB Rule 3-0470) and may cancel the Request for Proposals or reject any or all proposals pursuant to EWEB Rule 3-0640.

Date: September 26, 2025

Wendy Lopez, Purchasing Contact https://oregonbuys.gov/bso/

RFP 25-182-PSC 4 NERC CIP Compliance Evaluation and Roadmap

1. INSTRUCTIONS TO PROPOSERS

All proposals and contracts are subject to the provisions and requirements of the Oregon Revised Statutes 279A and 279B and EWEB Public Contracting Rules Divisions 1, 2, 3 and 6.

INFORMATION OF RECORD

The official source of information for this project until the Intent to Award is posted is located at the State of Oregon's bid site, located at: https://oregonbuys.gov/bso/. IT IS THE SOLE RESPONSIBILITY OF THE PROPOSER TO

CHECK THE WEBSITE ON A TIMELY BASIS.

PROPOSAL PREPARATION

1.1 PROPOSAL FORMAT AND COST

Proposals shall be typewritten or prepared in ink and shall be submitted electronically, on the form provided in the Request for Proposals. Proposals shall conform to the requirements of the Request for Proposals. All necessary attachments shall be submitted with the proposal and in the required format.

Proposer is responsible for all costs incurred in connection with its Proposal, including, but not limited to, the costs to prepare and submit the Proposal, costs of samples and other supporting materials, costs to participate in demonstrations, and costs associated with protests.

1.2 PROTEST OF SPECIFICATIONS / REQUIREMENTS

A Proposer who believes that the procurement process is contrary to law, or that the solicitation is unnecessarily restrictive in that specifications limit competition arbitrarily, without reasonably promoting the fulfillment of the procurement needs of EWEB, or that the solicitation document is legally flawed in that it contains terms or conditions that are contrary to law, or that the solicitation improperly specifies a brand name as defined in ORS 279B.200, may submit a protest via email to wendy.lopez@eweb.org.

Insert the following in the subject header:

RFP SPECIFICATION PROTEST, RFP #25-182-PSC

To be considered, protests shall be received no less than 5 business days before the RFP closing date (per

EW-3-0700(2)).

Protest of specifications shall include the reason for protest, any and all evidence and documented factual information that supports Proposer’s protest, and any proposed changes to the requirements. The EWEB Purchasing department shall promptly respond to each written protest, and where appropriate, issue all revisions, substitutions, or clarifications via Addenda to all Proposers. Proposers must exhaust all administrative remedies before seeking judicial review.

1.3 PROPOSER'S PROPOSED TERMS AND CONDITIONS Rule 3-0230(7)(b)

Proposers may include in the Cover Letter of their response, proposed revisions to the contractual terms and conditions in the MS Word Sample Contract (Exhibit 1) and the Scope of Work stated in this RFP document. (Proposer may show proposed changes by using Word Track Changes tool OR providing proposed revisions in cover letter.) Proposers may not protest or make a request to change the entire terms and conditions of the solicitation. For example, you may not seek to replace EWEB’s terms and conditions in whole with your company’s terms and conditions, standard contract, master services agreement, etc.

Terms included with Proposer’s proposal documents will not be considered unless they are listed in the Cover Letter as requested terms to negotiate.

mailto:wendy.lopez@eweb.org

RFP 25-182-PSC 5 NERC CIP Compliance Evaluation and Roadmap

EWEB reserves the right to negotiate the proposed terms and/or conditions with Proposer, and either accept or reject the proposed terms and/or conditions. REQUESTS FOR REVISION OF EWEB CONTRACTUAL

TERMS AND CONDITIONS MAY BE MADE AT TIME OF PROPOSAL SUBMISSION. THERE MAY BE NO

OPPORTUNITY TO DO SO AT A LATER DATE.

NO PROPOSED TERMS OR CONDITIONS SHALL BECOME A PART OF THE AWARDED CONTRACT UNLESS

ACCEPTED BY EWEB AND INCORPORATED INTO THE CONTRACT, IN WRITING.

1.4 SIGNATURE ON PROPOSAL

Proposals shall be signed by an authorized representative of the Proposer. Signature on a proposal certifies that the proposal is made without connection with any person, firm or corporation making a proposal for the same goods and/or services and is in all respects fair and made without collusion or fraud. Signature on a proposal also certifies that the Proposer has read, fully understands, and agrees with all solicitation requirements, terms, and conditions. No consideration will be given to any claim resulting from proposing without fully comprehending all requirements of the Request for Proposals.

Proposers shall only enter information within the proposal document where it is requested or required.

Proposers shall NOT make any alterations to the original solicitation document. Any proposal that has been altered may be rejected.

1.5 CANCELLATION, REJECTION, DELAY OF RFP

Pursuant to Rule 3-0640, EWEB may cancel, reject in whole or in any part of any proposals, without liability incurred by EWEB at any time after issuing an RFP, if EWEB believes it is in EWEB’s interest to do so.

1.6 PRE-PROPOSAL CONFERENCE- RESERVED

PROPOSAL SUBMISSION

1.7 PROPOSAL SUBMISSION

(a) OregonBuys Electronic Response

Please be sure to combine all documents into one pdf file before attempting to submit your bid into the OregonBuys bid site.

In order to submit an electronic proposal on the OregonBuys website, Proposer must be registered with OregonBuys and able to submit an electronic proposal. For instructions to register on OregonBuys, visit the following site: OrBuysSupplierRegistrationSteps.pdf (oregon.gov)

If you experience any issues registering, please contact OregonBuys at:

Phone: 1-855-800-5046 Email: support.oregonbuys@das.oregon.gov

When Proposer is submitting their proposal electronically, Proposer should follow the procedures outlined in any of the following:

https://www.oregon.gov/das/ORBuys/Documents/OregonBuys%20Vendor%20Formal%20Solicitation%20R esponse.pdf for electronic submission.

A video presentation on submitting an electronic proposal may be found at: Supplier - Submitting a Quote - Overview (periscopeholdings.com)

Terminology specific to the OregonBuys system may be found at:

https://www.oregon.gov/das/ORBuys/Documents/OrBuysSupplierRegistrationSteps.pdf mailto:support.oregonbuys@das.oregon.gov https://www.oregon.gov/das/ORBuys/Documents/OregonBuys%20Vendor%20Formal%20Solicitation%20Response.pdf https://www.oregon.gov/das/ORBuys/Documents/OregonBuys%20Vendor%20Formal%20Solicitation%20Response.pdf https://www.periscopeholdings.com/courses/suppliersubmittingaquote/#/lessons/-IJ5uftCSaLqTjitSezQGrNh9dTNGqaA https://www.periscopeholdings.com/courses/suppliersubmittingaquote/#/lessons/-IJ5uftCSaLqTjitSezQGrNh9dTNGqaA

RFP 25-182-PSC 6 NERC CIP Compliance Evaluation and Roadmap https://www.oregon.gov/das/ORBuys/Documents/Phase1TerminologyCrosswalk.pdf

Proposals received in a manner other than through the OregonBuys website and/or after the closing date and time will not be considered and will be rejected. EWEB is not responsible for proposals submitted in any manner format or to any delivery point other than as required by the Solicitation document.

(b) REQUIRED PROPOSAL PACKAGE Complete, sign, and return the following documents as RFP response. Failing to include these documents could lead to rejection of Proposal.

• Cover Letter, with:

Contractual Acceptance: Statement accepting ALL terms and conditions contained in this solicitation and the Sample Contract (Exhibit 1). Statement may also include request for negotiation of proposed terms and conditions as allowed per Section 1.4.

Termination for Default: Proposers shall indicate if they have had a contract terminated for default in the last five years. Termination for default is defined as notice to stop performance that was delivered to the Proposer due to the Proposer’s non-performance or poor performance and the issue of performance was either (a) not litigated due to inaction on the part of the Proposer, or (b) litigated and determined that the Proposer was in default.

NOTE: If a Proposer has had a contract terminated for default in this period, then the Proposer shall submit full details including the other party’s name, address and phone number. EWEB will evaluate the facts and may, at its sole discretion, reject the proposal on the grounds of Proposer’s past performance.

• Response to Minimum Qualifications (Section 3)

• Response to All Evaluation Criteria (Section 5)

• Proposal Form (Section 6)

• All posted addenda acknowledged

(c) RESPONSIVENESS / RESPONSIBILTIY A “Responsive” proposal is a proposal that substantially complies with the Request for Proposals instructions and requirements.

A “Responsible” Proposer can demonstrate ability to meet the requirements of the Scope of Work, has the appropriate experience, is legally qualified to do the Work, has the required certifications required, has a satisfactory record of integrity and can meet the other requirements described in

ORS 279B.110(2).

1.8 ADDENDA

Any VERBAL communication cannot and shall not be construed as approval of the acceptability of any deviation to any requirement. All changes to requirements and/or the solicitation documents will be made in the form of Addenda. The Proposer is responsible for ensuring that all Addenda have been downloaded and are acknowledged in their RFP Response.

https://www.oregon.gov/das/ORBuys/Documents/Phase1TerminologyCrosswalk.pdf

RFP 25-182-PSC 7 NERC CIP Compliance Evaluation and Roadmap

All Addenda can be obtained electronically at the state of Oregon's bid site ("OregonBuys"):

https://oregonbuys.gov/bso/.

1.9 PROPOSAL MODIFICATION

If a Proposer wishes to make modifications to a submitted Proposal, Proposer must do so through OregonBuys prior to the Proposal Due Date and Time stated on the Cover Page for this RFP.

1.10 PROPOSAL WITHDRAWALS:

If a Proposer wishes to withdraw a submitted Proposal, Proposer must do so through OregonBuys, using the “Withdraw Quote” button prior to the Proposal Due Date and Time stated on the Cover Page for this RFP.

1.11 EXCEPTIONS

Any exceptions to the requirements of this solicitation MUST be submitted in accordance with Item 1.3

PROTEST OF SPECIFICATIONS / REQUIREMENTS. Exceptions submitted with your proposal, or in any manner other than the process provided herein, may cause your proposal to be ruled non-Responsive and rejected.

1.12 PROPOSAL OPENING: Unless otherwise provided by Law or Rule, proposals received in response to this

Request for Proposals shall be opened at the scheduled closing date and time at the EWEB Purchasing department located at 4200 Roosevelt Blvd, Eugene, Oregon 97402. Enquiring Proposers shall be informed only of the names of Proposers submitting proposals. No other information shall be available at that time.

Award decisions will NOT be made at the opening.

1.13 ALTERNATE PROPOSALS

Proposers may submit more than one proposal. All proposals must comply with the requirements of the RFP except that additional proposals may incorporate, by reference, repetitive information which is provided in the complete proposal.

1.14 PROPRIETARY DATA/PUBLIC RECORD

This Request for Proposal, together with copies of all documents pertaining to the award of a contract, shall be kept by EWEB and made a part of a file or record which shall be open to public inspection. If a proposal contains any information that is considered a trade secret under ORS 192.345(2), each sheet of such information shall be marked with the following legend:

“This data constitutes a trade secret under ORS 192.345(2), and shall not be disclosed, except in accordance with the Oregon Public Records Law, ORS Chapter 192”.

The Oregon Public Records Law exempts from disclosures only bona fide trade secrets, and the exemption from disclosure applies only "unless the public interest requires disclosure in the particular instance" ORS 192.345(2). Therefore, non-disclosure of documents or any portion of a document submitted as part of a proposal may depend upon official or judicial determinations made pursuant to the Public Records Law. The above restriction may not include cost or price information, which shall be open to public inspection.

1.15 SOCIAL EQUITY

EWEB supports the use of Minority, Women, Emerging Small Businesses (M/W/ESB), local businesses, Disadvantaged Business Enterprises and Qualified Rehabilitation Facilities (QRF). EWEB encourages the awarded offeror to use the following voluntary practices to promote open competitive opportunities for disadvantaged businesses as applicable:

a. Access lists of certified minority, women, emerging small business or disadvantaged business enterprises from the Oregon State Office of Minority, Women and Emerging Small Business (OMWESB) by visiting their website at:

https://oregonbuys.gov/bso/

RFP 25-182-PSC 8 NERC CIP Compliance Evaluation and Roadmap

b. Visit the Oregon State Qualified Rehabilitation Facilities Program website to search for Qualified Rehabilitation Facilities from whom to procure products or services.

1.16 SCHEDULE OF EVENTS

The schedule of events set out herein represent Eugene Water & Electric Board’s best estimate of the schedule that will be followed.

Request for Proposal released September 26, 2025

Last day for EWEB to receive Protests of Requirements/Specifications/Terms October 17, 2025

Last day for EWEB to receive questions from Proposers October 17, 2025

Last day EWEB will post Addenda on Bid Site October 21, 2025

Closing date (last day to submit proposals to EWEB) October 28, 2025

Responses evaluated Oct 29-Nov 7, 2025

Intent to Award Announcement Posted on Bid Site November 10, 2025

Board Approval (if required) December 2, 2025

Contract Award December 1, 2025

Contract Award if Board Approval Required December 9, 2025

ANTICIPATED PROJECT SCHEDULE:

Start Date December 1-9, 2025

End Date December 31, 2026

RFP 25-182-PSC 9 NERC CIP Compliance Evaluation and Roadmap

2. SCOPE OF WORK

2.1 BACKGROUND /OBJECTIVES

EWEB has been operating under an exemption of a North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standard that allowed classification as a Low Impact entity. In July 2025, EWEB was notified that this exemption is no longer applicable, and the utility must evaluate compliance under CIP-002-8, Cyber Security-BES Cyber System Categorization, which may result in reclassification to Medium or High Impact.

EWEB seeks a qualified consultant with demonstrated NERC CIP expertise to provide technical consultation, analysis, and roadmap development to support compliance readiness.

2.2 LENGTH OF CONTRACT.

The contract for this project (“Contract”) will start from the date of award, approximately December 1-9, 2025, and will last approximately until December 31, 2026.

2.3 LOCATION OF WORK

EWEB WILL NOT provide workspace for the Contractor. The Contractor must provide its own workspace.

2.4 SCOPE OF WORK

The selected contractor shall provide the following services:

Phase I – Standards Interpretation & Impact Rating Validation

• Review EWEB’s BES asset inventory and preliminary Impact Rating analysis. Evaluation will be provided 1) under EWEB’s current configuration and 2) with revisions to our configuration and operations to determine opportunities to simplify systems and impacts to the grid.

• Validate interpretation of CIP-002-8 criteria and confirm required Impact Rating analysis evaluated by EWEB staff. Provide a framework for analysis.

• Deliver a written Impact Rating Validation Report documenting assumptions, decision points, and rationale.

If Phase I determines Impact Rating Analysis remains at Low, the project will be complete, and no further support is required. If the Impact Rating Analysis indicates a change to Medium or High, a Notice to Proceed will be issued for Phase II work, once received the work can begin immediately.

Phase II – Gap Assessment and Roadmap Development Gap Assessment

• Conduct a structured review of EWEB’s current practices against Medium/High Impact requirements.

• Identify gaps, partial compliance areas, and strengths.

• Deliver a Gap Assessment Report with recommendations and prioritization.

Roadmap Development

• Collaborate with internal stakeholders to prepare a Compliance Roadmap including:

o Sequenced actions and milestones o Staffing and resource requirements o Technology/tool recommendations o Estimated timelines aligned with CIP-002-8 implementation expectations

• Provide a draft roadmap (Feb 28, 2026) and final roadmap (Apr 30, 2026).

RFP 25-182-PSC 10 NERC CIP Compliance Evaluation and Roadmap

Ongoing Consultation

• Provide advisory support through Dec 31, 2026.

• Participate in up to 12 stakeholder meetings (virtual).

• Review draft policies, procedures, or controls as requested.

DELIVERABLES:

• Impact Rating Validation Report – Jan 30, 2026

• Gap Assessment Report – Feb 28, 2026

• Draft Roadmap – Feb 28, 2026

• Final Roadmap – Apr 30, 2026

• Advisory Notes/Meeting Participation – ongoing through Dec 31, 2026

RFP 25-182-PSC 11 NERC CIP Compliance Evaluation and Roadmap

3. MINIMUM QUALIFICATIONS (PASS/FAIL)

Minimum Qualifications (Pass/Fail)

Following are the “Minimum Requirements” that shall be met by all Proposers. Response to this section will be considered on a pass or fail basis. Response to each and all requirements must pass before a proposal will be reviewed and scored by the evaluation team.

Proposers shall respond to each of the Minimum Requirements in writing in a brief and concise manner. (See Submittal section following.) EWEB does not pre-qualify Proposers; your proposal must show that your firm meets the requirements. EWEB will attempt to answer questions or clarify the requirements if needed.

1. Proposer must have been in business providing similar services continuously for at least five (5) years.

2. Proposer shall provide references for at least two (2) projects successfully completed in the past five (5) years similar in nature to the services required in this solicitation. Particularly, with focus on NERC CIP standards.

3. Proposer must also provide experience/performance information for key sub-contractors that will provide sub-contracting services for Proposer under this Contract.

Submittal of Proposer Qualifications

Please provide the following information on individual pages labeled “Minimum Qualifications”.

1. Company Information:

a. Indicate whether Proposer is a sole proprietor, partnership, LLC, corporation or other (specify).

b. Indicate how many years Proposer has continuously been in business.

c. Indicate the number of years Proposer has had experience providing similar services comparable to that required by the Solicitation.

2. Indicate whether Proposer has had a contract terminated for default or breach (as described in item A.2 above) in the last five (5) years. If Proposer has had a contract terminated for default in this period, then the Proposer shall submit full details, including the other party’s name, address, and phone number. EWEB will evaluate the facts and may, at its sole discretion, reject the proposal on the grounds of Proposer’s past performance.

3. Related Project Experience

Proposer shall provide references for at least two (2) projects successfully completed in the past five (5) years similar in nature to the services required in this solicitation. Particularly with focus on NERC CIP standards.

For each client reference, the following information shall be provided:

a. Name of client

b. Description of services rendered

c. Order due date & actual completion date

d. Original contracted cost and actual cost at time of Final Completion

e. Client contact person who is able to attest for Proposer’s performance, including email address, telephone number, and city/state located in. (This person should be notified by Proposer that EWEB may contact him/her for purposes of checking references.)

RFP 25-182-PSC 12 NERC CIP Compliance Evaluation and Roadmap

4. EVALUATION PROCESS & CONTRACTOR SELECTION

EWEB intends to use a Single-Tier evaluation process where award is based on written evaluation response, price, and successful negotiations of contract terms. Interviews will not be held. Further details follow.

The total number of points possible for written proposals is 100.

Points are assigned as follows:

Criteria Total Possible Points

Tier One

Minimum Qualifications Pass/No Pass only Experience & Qualifications 30 Project Approach & Methodology 25 Team Capability 20 Pricing Proposal 15 References 10

TOTAL POSSIBLE SCORE 100

4.1 Review and Acknowledgment of Defective Proposals

Due to limited resources, EWEB generally will not completely review or analyze proposals that on their faces fail to comply with the minimum mandatory requirements of the solicitation documents nor will EWEB generally investigate the references or qualifications of such proposals. Therefore, EWEB will not acknowledge whether or not an unsuccessful proposal was complete, responsive, responsible, sufficient, or lawful in any respect. This is a public solicitation, the processes and procedures which are established and required by Oregon law and EWEB adopted rules. Proposers are advised to strictly follow the process, procedures, and requirements as set forth in the RFP documents and not anticipate or rely on any opportunity to negotiate, beyond such limitations that are identified herein.

4.2 Right of Rejection

Proposers must comply with all of the terms of the RFP, EWEB Rules, and all applicable local, state, and federal laws, administrative rules, and regulations. The Purchasing Contact may reject any proposal that does not comply with all of the material and substantial terms, conditions, and performance requirements of the RFP.

Proposers may not make stipulations or restrict the rights of EWEB. If an Proposer does so, the Purchasing Contact may determine the proposal to be a non-responsive counter-offer and the proposal may be rejected.

The Purchasing Contact may waive minor informalities that:

• do not affect responsiveness,

• are merely a matter of form or format,

• do not change the relative standing or otherwise prejudice other offers,

• do not change the meaning or scope of the RFQ/RFP,

• are trivial, negligible, or immaterial in nature,

• do not reflect a material change in the work, or,

• do not constitute a substantial reservation against a requirement or provision, RFP 25-182-PSC 13 NERC CIP Compliance Evaluation and Roadmap

EWEB reserves the right to refrain from making an award if it determines that to be in its best interest.

A proposal from a debarred or suspended Proposer shall be rejected.

4.3 References

EWEB reserves the right to request and investigate any and all references and the past performance information provided in the proposal with respect to Respondent’s successful performance of similar projects, compliance with specifications and contractual obligations, completion or delivery of a project on schedule, and lawful payment of employees and workers.

EWEB reserves the right to check any and all sources for information and to include sources other than the references provided in the Proposer’s proposal. EWEB may consider information available from any such source including government bodies and regulatory authorities in evaluating respondents, including past experience EWEB has had with the Proposer.

4.4 Responsibility

EWEB reserves the right to investigate and evaluate, at any time prior to award and execution of the Contract, the apparent successful Proposer’s responsibility for performing the Contract, as defined in Rule 3-0500. Submission of a signed proposal shall constitute approval for EWEB to obtain any information EWEB deems necessary to conduct the evaluation. EWEB reserves the right to request additional information or documentation from the successful Proposer prior to award of a contract. Such information may include, but is not limited to, current and recent balance sheets, income statements, cash flow statements, or a performance bond from an acceptable surety. Failure to provide this information will result in the rescission of EWEB’s Intent to Award.

EWEB may postpone the award of the Contract after announcement of the apparent successful Proposer in order to complete its investigation and evaluation. Failure of the apparent successful Proposer to demonstrate responsibility shall render the Proposer non-responsible and shall constitute grounds for rejection of the proposal.

4.5 Clarification of Response

EWEB reserves the right to request clarification of any item in any proposal, or to request additional information necessary to properly evaluate a particular proposal. All requests for clarification and responses shall be in writing.

During the evaluation of Proposals, Proposers must respond to any request for clarification from the Evaluation Committee within 24 hours of request (Monday through Friday). Inability of the Evaluation Committee to reach a Proposer for clarification and/or failure of a Proposer to respond within the time stated may result in rejection of that Proposer’s Proposal.

4.6 Evaluation Process

A single-tiered process will be used for this RFP. Written proposals will be evaluated; scoring and Contract award will be based on Proposers qualifications, experience, and pricing.

Pursuant to Rule 3-0230(14)(d), EWEB may employ methods of Contractor selection that include without limitation:

(A) An award or awards based solely on the ranking of proposals;

(B) Discussions leading to best and final offers, in which EWEB may not disclose private discussions leading to best and final offers;

RFP 25-182-PSC 14 NERC CIP Compliance Evaluation and Roadmap

(C) Discussions leading to best and final offers, in which EWEB may not disclose information derived from proposals submitted by competing Proposers;

(D) Serial negotiations, beginning with the highest ranked Proposer;

(E) Multiple-tiered competition designed to identify, at each level, a class of Proposers that fall within a competitive range or to otherwise eliminate from consideration a class of lower ranked Proposers;

(G) Any combination of methods described in this section.

4.7 RESERVED

4.8 Contractor Selection

If a Contract is awarded, EWEB shall award the Contract to the responsible Proposer whose proposal EWEB determines in writing to be the most advantageous to EWEB based on:

a) The evaluation process and evaluation factors described in this Request for Proposals;

b) Any applicable preferences allowed by EWEB Rules, Division 2; and when applicable,

c) The outcome of any negotiations authorized by this Request for Proposals

If this Request for Proposals specifies or authorizes the award of multiple public contracts, EWEB shall award public contracts to the responsible Proposers who qualify for the award of a Contract under the terms of this Request for Proposals.

The firm with the highest total score as a result of written proposal/pricing scoring will be awarded the Contract.

4.9 Notice of Intent to Award

After the completion of the evaluation and final ranking, the Purchasing Contact will issue a written notice of Intent to Award to all Proposers and post on the OregonBuys website. The notice will set out the names and ranks of all Proposers and identify the Contractor selected for award (“Highest Ranked Proposer” or “Finalist”).

4.10 Contract Negotiation

Upon announcement of Intent to Award, EWEB will begin negotiating a Contract with the Highest Ranked Proposer and shall conduct negotiations toward obtaining written agreement on:

a) The Statement of Work;

b) The Contract price as it is affected by negotiating the Statement of Work; and

c) Any other terms and conditions resulting in the final Contract.

A sample contract (Exhibit #1) is attached for Proposer reference.

At any time during discussions or negotiations, EWEB may terminate such discussions or negotiations with the highest-ranked Proposer if it reasonably believes that:

a) The Proposer is not discussing or negotiating in good faith; or

b) Further discussions or negotiations with the Proposer will not result in the parties agreeing to the terms and conditions of a final Contract in a timely manner.

If EWEB terminates negotiations, EWEB may then commence negotiations with the next highest ranked Proposer and continue the process until EWEB has determined to award the Contract to the Proposer with whom it is currently discussing or negotiating. If negotiations with any Proposer does not result in a Contract within a reasonable amount of time, as determined solely by EWEB, EWEB may reject all proposals and

RFP 25-182-PSC 15 NERC CIP Compliance Evaluation and Roadmap cancel the RFP. Nothing in the rule precludes EWEB from proceeding with a new formal solicitation for the same Work described in the RFP that failed to result in a Contract.

4.11 Protests and Judicial Review of Competitive Bidding and Proposals

Pursuant to Rule 3-0740, a bidder or proposer may protest the award of a public contract or a notice of intent to award a public contract, whichever occurs first, if the bidder or proposer is adversely affected because the bidder or proposer would be eligible to be awarded the public contract in the event that the protest were successful; and the reason for the protest is that all higher ranked proposals are nonresponsive; EWEB has failed to conduct the evaluation of proposals in accordance with the criteria or processes described in the solicitation materials; EWEB has abused its discretion in rejecting the protestor’s proposal or proposal as nonresponsive; or EWEB's evaluation of proposals or EWEB's subsequent determination of award is otherwise in violation of EWEB Rules.

Eligible Proposers protesting award shall follow the procedures described herein. Protests that do not follow these procedures will not be considered. This protest procedure constitutes the sole administrative remedy available to Proposers.

a) Protests must be emailed to the Purchasing Contact and received within seven (7) days after the notice of intent to award the Contract has been posted on the bid site. “Protest of RFP XXX-XXX-X” shall be entered in the subject header of the email. The Purchasing Contact will email a reply acknowledging receipt of the notice. EWEB will not consider late protests.

b) All protests must be in writing, signed by the protesting party or an authorized Agent and submitted to the EWEB Purchasing Contact listed on page 1. The protest must state all facts and arguments on which the protesting party is basing the protest.

c) Only protests stipulating an issue of fact concerning a matter of bias, discrimination or conflict of interest, non-compliance with procedures described in the procurement documents, or EWEB policy shall be considered. Protests based on procedural matters will not be considered.

d) EWEB’s Purchasing Supervisor will review the protest and will email the protesting party a written response within three (3) business days of receipt of the written protest to the email provided in Proposer’s proposal. Any written response may be comprised of a determination of the protest, a notice to the protesting party of the need for additional time in which to evaluate the matter, or other notice to the protesting party.

e) If the Purchasing Supervisor’s determination (response) is adverse to the protester, any further appeal of the Purchasing Supervisor’s determination (response) by the party must be submitted via email to EWEB’s General Manager within three (3) business days of issuance of the Purchasing Supervisor’s determination (response).

f) EWEB’s General Manager will review any appeal of the Purchasing Supervisor’s determination and shall email the protesting party a written response within three (3) business days of receipt of written appeal to the email provided in Proposer’s RFP response,

g) If the determination of the General Manager is adverse to the protesting party’s interest, the protesting party may only appeal to EWEB’s Board of Commissioners by filing an emailed notice of appeal to the Board with the General Manager within two (2) business days of issuance of the General Manager’s written determination.

RFP 25-182-PSC 16 NERC CIP Compliance Evaluation and Roadmap

h) The Contract Review Board, in considering the protest, shall review the documentation presented to the Purchasing Supervisor and the General Manager on or before the next regularly scheduled Board Meeting, but in no event shall they be required to review in less than ten (10) business days, and thereafter, base their decision on such material. The Board review will be limited to the evaluation of compliance with EWEB’s policies and procedures, requirements of the RFP and the equal and fair application of EWEB’s contracting rules. The Contract Review Board's determination shall be EWEB's final decision.

An adversely affected or aggrieved Proposer must exhaust all avenues of administrative review procedures and relief before seeking judicial review of EWEB's Contractor selection or Contract award decision.

RFP 25-182-PSC 17 NERC CIP Compliance Evaluation and Roadmap

5 EVALUATION CRITERIA

Instructions - Include in your proposal package a response to the following questions, listing the question first and the response directly beneath. Failure to respond to one or more questions could lower total score or cause the response to be deemed Non-Responsive and rejected.

5.1 Company Experience and Qualifications (30 points possible)

Demonstrate Firms experience and qualifications to complete the requested services. Provide case studies or examples previously completed work involving similar work.

Experience of the firm with similar projects will be evaluated based on the following:

a. Number of similar projects

b. Experience providing similar services for utilities

c. Proven expertise with NERC CIP Standards

d. Knowledge of BES Impact Rating methodology and gap assessments

e. Familiarity with both Operational Technology (OT) and Information Technology (IT) environments in utility contexts

f. Demonstrated ability to provide actionable roadmaps

5.2 Project Approach and Methodology (25 points possible)

Demonstrate Proposer’s ability to clearly define the desired action to be taken and to perform the tasks identified in the Scope of Work. Response should include the proposed schedule for delivery of EWEB’s stated milestones and indicate management approach to be utilized when addressing key issues of the project.

Points will be awarded based on the following:

a. Clarity and feasibility of proposed approach

b. Rigor of proposed methodology

c. Demonstration of ability to meet the deadline while accounting for unanticipated delays.

d. Critical path and tasks that require EWEB personnel clearly listed in the proposed schedule/timeline

5.3 Firms and Proposed Team’s Capability (20 points possible) Demonstrate the firm and proposed team’s capability to complete the requested services. Response must list:

• The proposed team members’ roles, experience, and qualifications. Include Resume’s for key personnel.

• An explanation describing how the company can accommodate varying levels of work assigned under this Contract, including any limitations.

• Current or projected assignments and location of key members, and whether these assignments may conflict with the key members’ ability to respond to this project;

• Internal procedures and/or policies related to work quality and cost control.

Points will be awarded based on the extent of the skills and experience of the proposed key-personnel, ability of the firm to manage work assignments to ensure this project is completed on time, and within budget.

5.4 Pricing Proposals (15 points possible)

Provide details of estimated hours, staff positions and hourly rates to determine a complete and not-to-exceed project fee. Fee structure should be tied to stated deliverables and stated based on phase.

RFP 25-182-PSC 18 NERC CIP Compliance Evaluation and Roadmap

• Provide a breakdown and total not-to-exceed dollar amount for all anticipated expenses to be reimbursed by EWEB during the term of the Contract. Estimate travel expenses using the United States General Services Administration rates found at the link below. Include transportation, lodging, meals etc. (Please note that expenses will be reimbursed at cost and no mark-up shall apply. )

Travel Resources | GSA

Points will be awarded based on hours spent on project, hourly fees and total overall cost.

5.5 References from Past Clients (10 points possible)

EWEB will contact the client references listed with the minimum requirements submittal. Please ensure your client representatives are still available at the contact email and phone provided and that they are willing to speak to EWEB regarding your past project(s).

References will be evaluated on past performance and client satisfaction.

https://www.gsa.gov/travel?gsaredirect=travel

RFP 25-182-PSC 19 NERC CIP Compliance Evaluation and Roadmap

6. PROPOSAL FORM

Proposals should be prepared and organized in a clear and concise manner and must include all information required by this RFP. Separate and clearly identify all sections and include a Table of Contents. Headers and titles should be used to identify required information.

A. PROPOSAL PACKAGE

RETURN THE FOLLOWING WITH YOUR RFP RESPONSE, PER SECTION 1.8(B).

(Failing to include these documents could lead to rejection of Proposal.)

Place a check in front of each item indicating inclusion in your response)

COVER SHEET, with introduction of firm and the following:

o Contractual Acceptance: Statement accepting ALL terms and conditions contained in this solicitation. Statement may include request for negotiation of proposed terms and conditions as allowed per Section 1.8(B).

o Termination for Default: Proposers shall indicate if they have had a contract terminated for default in the last five years. Termination for default is defined as notice to stop performance that was delivered to the Proposer due to the Proposer’s non-performance or poor performance and the issue of performance was either (a) not litigated due to inaction on the part of the Proposer, or (b) litigated and determined that the Proposer was in default.

NOTE: If a Proposer has had a contract terminated for default in this period, then the Proposer shall submit full details including the other party’s name, address and phone number. EWEB will evaluate the facts and may, at its sole discretion, reject the proposal on the grounds of Proposer’s past performance.

RESPONSE TO MINIMUM QUALFICATIONS per Section 3 RESPONSE TO ALL EVALUATION CRITERIA listed in Section 5 PROPOSAL FORM – This Section 6

ALL POSTED ADDENDA ACKNOWLEDGED

ALL DOCUMENTS COMBINED INTO ONE PDF FILE

B. ACKNOWLEDGMENT OF RECEIPT OF ADDENDA TO RFP DOCUMENTS:

Proposer acknowledges all Addenda and agrees to be bound by their contents.

Circle each RFP Addendum received: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10

Check if not applicable or no Addenda were received: ____

C. MWESB STATUS

EWEB encourages contracting with minority owned, woman owned, and emerging small businesses (MWESB).

The State of Oregon offers a certification process. Indicate below if your business is a MWESB and if so, which categories have been state certified.

MWESB Certified? (Indicate Yes or No) _______

If yes, please indicate which of the following applies: ______________________________

Minority Owned, Woman Owned, Emerging Small Business, or Veteran Owned

RFP 25-182-PSC 20 NERC CIP Compliance Evaluation and Roadmap

D. BIDDER RESIDENCY

ORS 279A.120 states, "For the purposes of awarding a public contract, a contracting agency shall":

(a) Give preference to goods or services that have been manufactured or produced in this state if price, fitness, availability and quality are otherwise equal; and

(b) Add a percent increase to the bid of a nonresident bidder equal to the percent, if any, of the preference given to the bidder in the state in which the bidder resides.

“Resident Bidder” means a bidder that has paid unemployment taxes or income taxes in this state during the 12 calendar months immediately preceding submission of the bid, has a business address in this state and has stated in the bid whether the bidder is a “Resident Bidder” under this paragraph.

“Non-Resident Bidder” means a bidder who is not a “Resident Bidder” as defined above.

a. CHECK ONE: Bidder is a ( ) RESIDENT Bidder ( ) NON-RESIDENT Bidder.

b. If Resident Bidder, enter your Oregon business address: (physical and mailing address)

c. If a Non-Resident Bidder, enter state of residency:

d. If a Non-Resident Bidder, do you or your Company receive, or are you or your Company eligible for any preference in award of contracts with your state’s government or with other governmental bodies in your state?

CHECK ONE: ( ) YES ( ) NO

If YES, state the preference percentage: _________________%

If YES, but not a percentage of bid price, describe the preference:

If YES, state the law or regulation that allows the preference described (legal citation):

E. ACKNOWLEDGEMENT OF INDEPENDENT CONTRACTOR STATUS

The undersigned acknowledges that:

1. Contractor certifies its status as an independent contractor in satisfaction of Oregon law, including ORS 670.600, and shall perform all required Work as an independent contractor. EWEB holds the right (i) to determine the delivery schedule for the Work to be performed and (ii) to evaluate the quality of the completed performance, but EWEB cannot and will not control the means or manner of Contractor’s performance. Contractor is responsible for determining the appropriate means and manner of performing the Work.

2. The parties covenant that Contractor, its sub-contractors, agents, officers and representatives do not qualify as officers, employees, or agents of EWEB as those terms are used in ORS 30.265 nor shall they seek such qualification relating to performance of the Work.

RFP 25-182-PSC 21 NERC CIP Compliance Evaluation and Roadmap

3. Contractor agrees it is responsible for all federal and state taxes or other payments or withholdings applicable to compensation or payments paid to Consultant under this Contract and shall hold EWEB harmless from such financial exposures.

F. RESERVED

PROPOSER SIGNATURE / EXECUTION OF RFP SUBMISSION

G. ASSURANCES:

The undersigned attests that they:

Have read and understand all instructions, requirements, Addenda, site conditions, and terms and conditions contained herein (including the attachments and exhibits listed in this solicitation).

Have the authority and/or responsibility to submit a proposal and to bind their organization in all phases of this RFP process.

Confirm the information provided is true and accurate to the best of their knowledge.

Understand that any false statement may disqualify this offer from further consideration or may be cause for Contract termination.

Have not and will not discriminate against a sub-contractor in the awarding of a sub-contract because the sub-contractor is a disadvantaged minority, women or emerging small business enterprise certified under ORS 200.055.

Represent and warrant to EWEB that they have the power and authority to enter into and perform work under an awarded Contract and that the Contract, when executed by EWEB and Contractor, the Contract shall be a valid and binding obligation of Contractor, enforceable in accordance with its terms.

Arrived at the specifics of the proposal, including price and amounts, independently and without communication or agreement with another Proposer, except as disclosed in a separately attached statement;

Will arrive at price and amounts independently and without communication or agreement with another Proposer;

Have not directly or indirectly induced or solicited another Proposer, in order to benefit a third person, to submit a false or sham proposal, to refrain from proposing, or to change a proposal;

Will not directly or indirectly disclose the Proposer's proposal price, a breakdown of the price, the contents of the price or information or data related to the price to another Proposer;

Will not seek through communication or agreement with a person to fix the proposal price of the Proposer or another Proposer, to fix an overhead, profit or cost element of the proposal price of the Proposer or another Proposer or to secure any advantage against the contracting agency or any other person interested in the public contract;

Have not directly or indirectly expressed an interest or lack of interest in the public contract, or paid or offered to pay a fee to a person, to cause a collusive or sham proposal;

RFP 25-182-PSC 22 NERC CIP Compliance Evaluation and Roadmap

Contractor, by signing this Proposal Form, represents and warrants that, if awarded, Contractor’s performance under this contract will create no potential or actual conflict of interest, including but not limited to conflicts of interest as defined in ORS 244.020. Contractor further warrants that no state or federal law or EWEB rule will prevent Contractor's lawful performance of an awarded contract. If Contractor is currently performing work for EWEB or another governmental entity, Contractor’s participation in other public contracts will not create a potential or actual conflict of interest in performance of this Contract, if awarded.

PROPOSER INFORMATION:

Proposer Company Name

Company Address (from which work will be performed)

Telephone Number Company Web Address

Person Signing RFP_______________________________________Title_______________________________ Please print or type Name

Signature: _________________________________________________________________________________

Email Address: _____________________________________________________________________________________

RFP CONTACT (if different than above)

RFP Representative_______________________________________Title_______________________________ Please print or type Name

Signature: _________________________________________________________________________________

Email Address: _____________________________________________________________________________

Phone: ____________________________________________________________________________________

Personal Services Contract

NERC CIP Compliance Evaluation and Roadmap

Contract No. 25-182-PSC

By and between

Eugene Water & Electric Board and

Contractor

Contract #25-182-PSC 2 NERC CIP Compliance Evaluation and Roadmap

This Contract is entered into by and between the Eugene Water & Electric Board, hereinafter called EWEB, and ________________________________, hereafter called Contractor.

WHEREAS, EWEB has need for the services of an independent contractor with the particular training, knowledge, and experience offered by the Contractor; and

WHEREAS, EWEB has negotiated the following Agreement in Eugene, Oregon, and Contractor has agreed to deliver its services in Eugene, Oregon;

NOW THEREFORE, in consideration of a sum agreed to by the Parties, the Contractor agrees to perform the services as described in this Contract, in accordance with all requirements, terms and conditions of…