RFP_Secondary_Solicitation_24NC0956.pdf

STATE OF CALIFORNIA GAVIN NEWSOM, Governor

PUBLIC UTILTIES COMMISSION

505 VAN NESS AVENUE

SAN FRANCISCO, CA 94102

California Public Utilities Commission (CPUC) Request for Proposal Number 24NC0956

For:

SDG&E Safety Culture Comprehensive Assessment

February 9, 2026

The California Public Utilities Commission (CPUC) invites you to review and respond to this Solicitation. In submitting your response, you must comply with the instructions found herein.

This is an open solicitation for all private entities, universities or governmental agencies.

The CPUC is seeking an Independent third-party Evaluator to conduct safety culture assessments.

Before submitting a response to this solicitation, interested parties should read and review the entire solicitation including any attachments, all referenced web addresses, and any regulations, orders, and statutes cited.

Note that all agreements entered into with the State of California will include by reference General Terms and Conditions (GTC 02/2025) and Contractor Certification Clauses (CCC 4/2017) that may be viewed and downloaded at the following internet site:

https://www.dgs.ca.gov/OLS/Resources/Page-Content/Office-of-Legal-Services-Resources-List- Folder/Standard-Contract-Language.

If you do not have Internet access, a hard copy can be provided by contacting the point of contact listed below. By submitting a proposal your firm agrees to the terms and conditions stated in this RFP and the proposed contract.

Any questions regarding the solicitation or terms and conditions of the proposed contract must be submitted by the deadline listed in the key action dates. Terms and conditions will not be negotiated after contract award.

Responses are due March 13, 2026, by 11:00 AM Pacific Time.

Total bid/proposal cost must not exceed $3,000,000.00

CPUC Point of Contact:

Michelle Thibeaux-Smith

Michelle.thibeaux-smith@cpuc.ca.gov https://www.dgs.ca.gov/OLS/Resources/Page-Content/Office-of-Legal-Services-Resources-List-Folder/Standard-Contract-Language https://www.dgs.ca.gov/OLS/Resources/Page-Content/Office-of-Legal-Services-Resources-List-Folder/Standard-Contract-Language mailto:Michelle.thibeaux-smith@cpuc.ca.gov

California Public Utilities Commission RFP Number 24NC0956

TABLE OF CONTENTS

1. SCOPE OF WORK AND CONTRACT TERMS

EXHIBIT A – SCOPE OF WORK

EXHIBIT B – BUDGET DETAIL AND PAYMENT PROVISIONS

EXHIBIT C – GENERAL TERMS AND CONDITIONS (GTC 04/2017)

EXHIBIT D – SPECIAL TERMS AND CONDITIONS

2. MINIMUM QUALIFICATIONS

3. ADMINISTRATIVE INFORMATION

4. SUBMISSION REQUIREMENTS

5. PREFERENCE AND INCENTIVE PROGRAMS

6. EVALUATION CRITERIA AND PROCESS

7. AWARD AND CONTRACT EXECUTION

8. REQUIRED ATTACHMENTS

ATTACHMENT 1 – SOLICITATION CHECKLIST

ATTACHMENT 2 – CONFLICT OF INTEREST STATEMENT

ATTACHMENT 3 – REFERENCES SHEET

ATTACHMENT 4 – PAYEE DATA RECORD

ATTACHMENT 5 – PAYEE DATA RECORD SUPPLEMENT

ATTACHMENT 6 – CONTRACTOR CERTIFICATION CLAUSES

ATTACHMENT 7 – DARFUR CONTRACTING ACT FORM

ATTACHMENT 8 – BIDDER DECLARATION FORM

ATTACHMENT 9 – DVBE DECLARATION FORM

ATTACHMENT 10 – COMMERCIALLY USEFUL FUNCTION CERTIFICATION

ATTACHMENT 11 – IRAN CONTRACTING ACT FORM

ATTACHMENT 12 – CALIFORNIA CIVIL RIGHTS LAW CERTIFICATION

ATTACHMENT 13 – GENERATIVE ARTIFICIAL INTELLIGENCE REPORTING

.............................................................................. ERROR! BOOKMARK NOT DEFINED.

ATTACHMENT 14 – COST SHEET

ATTACHMENT 15 – SAMPLE STANDARD AGREEMENT

1. SCOPE OF WORK AND CONTRACT TERMS

EXHIBIT A – SCOPE OF WORK

A. Introduction

This Scope of Work (SOW) defines the scope, objectives, deliverables, and responsibilities for conducting a comprehensive Safety Culture Assessment (SCA or Assessment) of San Diego Gas & Electric (SDG&E) by an independent third-party evaluator. SDG&E serves

3.7 million people across a 4,100-square-mile service territory, with 4600+ employees. The purpose of the SCA is to evaluate and enhance SDG&E’s safety culture in accordance with California Public Utilities Commission’s (CPUC’s or Commission’s) SCA Framework. The SCA Framework is derived from the principles of the International Atomic Energy Agency (IAEA) safety culture approach and methodology and has been adapted for application to large electric and gas investor-owned utilities (IOUs) regulated by the CPUC.

B. Background

The CPUC regulates IOUs, protects consumers, safeguards the environment, and ensures Californians have access to safe, reliable, and affordable utility infrastructure and services.

Within the CPUC, the Safety Policy Division (SPD) collaborates with other divisions to analyze, develop, recommend, and implement safety policies.

Over the past two decades, several utility-related catastrophic events have heightened public concern regarding the safety practices and safety culture of electric and gas utilities.1 In response, the CPUC and multiple state agencies have undertaken initiatives to strengthen oversite and improve safety culture.

Following the devastating wildfires of 2017 and 2018, the legislature enacted Senate Bill (SB) 901 (Dodd, 2018) that added Public Utilities Code (PUC) section 8386.2. This statute states the Commission “shall require a safety culture assessment of each electrical corporation to be conducted by an independent third-party evaluator [and] set the schedule for each assessment, including updates to the assessment at least every five years”2 and further that each electrical corporation subject to this requirement “shall not seek reimbursement for the costs of the assessment from ratepayers.” 3

In 2019, the Legislature adopted Assembly Bill (AB) 1054 (Holden, 2019), which directs the Office of Energy Infrastructure Safety (Energy Safety) to create a process for conducting annual safety culture assessments for each electric corporation.

In January 2025, the CPUC issued Decision (D.)25-01-031 (Decision), which established a Safety Culture Assessment Framework for IOUs (Framework) for electrical corporations, in compliance with PUC section 8386.2. The Framework was also extended to large gas

1 San Bruno 2010 - Gas pipeline rupture and explosion San Bruno 2010; Aliso Canyon 2015 Large scale gas leak;

Northern California wildfires in 2017and 2018(Paradise fire).

2 California Code, Public Utilities Code - PUC § 8386.2 3 Ibid.

utilities. The utilities subject to this Decision include Southern California Gas Company (SoCalGas), Pacific Gas and Electric Company (PG&E), Southern California Edison Company (SCE), and SDG&E (collectively referred to as the Joint IOUs).

The Decision established the basic elements of the SCA Framework, that states:

“This framework includes two components: (1) a Comprehensive Assessment of each investor-owned utility’s safety culture, conducted once every four years; and (2) an annual Self-Evaluation in the three intervening years to monitor progress. The Comprehensive Assessments will be conducted by a third-party independent evaluator. The Self-Evaluations will be conducted by each utility.”4

Starting with IAEA principles, the SCA Framework was developed using the “United States Nuclear Regulatory Commission’s (USNRC) Safety Culture Common Language and Institute for Nuclear Power Operations’ (INPO) Traits of a Healthy Nuclear Safety Culture.”5 It incorporates 10 traits that will serve as the foundation for the Comprehensive Assessment of the IOU’s safety culture.

The Decision directed CPUC to initiate the State of California’s Department of General Services procurement and contracting process to hire independent third-party evaluators to conduct the safety culture assessments.6 The Decision also established a schedule (below) for when assessments must begin – starting in 2026 - spanning a four-year cycle for each utility:7

Year Utility

August 1, 2026 San Diego Gas & Electric Company

August 1, 2027 Southern California Edison Company

August 1, 2028 Pacific Gas and Electric Company

August 1, 2029 Southern California Gas Company

August 1, 2030 San Diego Gas & Electric Company

August 1, 2031 Southern California Edison Company

August 1, 2032 Pacific Gas and Electric Company

August 1, 2033 Southern California Gas Company

4 D.25-01-031 at 2 5 D.25-01-031 at 21 6 D.25-01-031 at 63 OP.5 7 D.25-01-031 at 65 OP.14

The selected Contractor will perform the SCA in accordance with the definitions, Framework, and processes adopted in D.25-01-031, following the IAEA methodology and approach, adapted for the regulated electric and gas IOUs.

Purpose of the Safety Culture Assessment

The objectives of the SCA are to:

1. Provide SDG&E leadership with thorough insights into the underlying basic assumptions and cultural drivers influencing employee behavior and outcomes, forming a foundation for improvement actions and lasting cultural change.

2. Assess the effectiveness of the IOU’s safety culture improvement efforts between assessments to enhance future improvement approaches and strategies.

3. Provide the CPUC and SDG&E with insights and recommendations to enhance tools and practices used to monitor safety culture and improvement between SCAs.

C. Statement of Work

Using the definitions adopted in D.25-01-031, the SCA must:

A. Move beyond focusing on characteristics and attitudes to also address the 'underlying assumptions' – the often unspoken, deeply held beliefs that dictate "the way we do things around here"8.

B. Address all aspects of safety, as defined in D.25-01-031, with an emphasis on public safety, process and operational safety, and the prevention of low-probability high-consequence events.

C. Cover all organizational levels and functions within SDG&E that are relevant to, or have the potential to impact, safety and risk; from executive leadership to operational staff and external contractors.

D. Include both gas and electric utility services, as applicable.

The Contractor will perform a comprehensive SCA of SDG&E that includes the following components:

1) Multi-method comprehensive assessment: Conduct a systematic, multi-method assessment to provide a holistic snapshot of SDG&E’s safety culture. The assessment must employ multiple data collection methods, consisting of questionnaires/surveys, interviews, focus groups, site observations, and document reviews; triangulating data across the different methods to:

a. Identify common themes, differences, inconsistencies, and gaps in perceptions and behaviors;

b. Validate findings through cross-method comparisons; and

c. Develop a rich, evidence-based understanding of SDG&E’s safety culture.

8 Schein, E.H. (1985). Organizational Culture and Leadership. 1st ed. San Francisco: Jossey-Bass.

The assessment shall be conducted using the IAEA methodology and approach adapted for the regulated electric and gas IOUs.9 This approach is open and exploratory by applying a concurrent assessment process in which each data collection method is treated independently such that no single data collection method will inform treatment of subsequent data collection methods. For example, a survey/questionnaire will not be used to inform subsequent data collection methods, but rather each data collection method is treated independently of the other methods and collected concurrently. Data collection methods are subsequently integrated through triangulation across methods.10 Following the IAEA methodology, data analysis consists of a descriptive analysis, followed by a normative analysis, using the CPUC’s normative framework.11

Upon completion of the SCA, the Contractor shall also provide recommendations for potential enhancements and improvements to the CPUC SCA Framework and process based on observed lessons learned during the assessment.

2) Progress evaluation: Evaluate progress made by SDG&E based on its current assessment of its Safety Culture and their stated improvement strategy, including:

a. An analysis of actions taken to address areas of concern or weakness identified in any previous safety culture assessments performed by or for

SDG&E.

b. An evaluation of the effectiveness and sustainability of SDG&E’s post-assessment safety culture improvement initiatives.

3) Validation of improvement self-evaluations: Review and evaluate SDG&E’s improvement self-evaluations results by:

a. Comparing findings against the results of the Comprehensive Assessment with any previous safety culture assessments performed by or for SDG&E.

b. Identifying and interpreting gaps, differences, inconsistencies, and similarities.

c. Providing recommendations to improve the self-evaluation process, tools, and requirements.

All required documents/reports must be submitted to the CPUC Contract Manager via email in an Office Open XML format, (e.g., .docx, .xlsx, .pptx.), and other formats as required by the CPUC Contract Manager.

Tasks and Deliverables

9 For the IAEA methodology see STI/PUB/1682 and SVS-32_web.pdf 10 “The IAEA Safety Culture Assessment Methodology” https://gnssn.iaea.org/NSNI/SC/_layouts/15/WopiFrame.aspx?sourcedoc=%7B0FAD6F0F-EC4C-408D-9EA8- 42DABACA3237%7D&file=08%20IAEA%20SCSA%20Assessment%20Methods.pptx&action=default&CT=1765 578915447&OR=DocLibClassicUI 11 D.25-01-031, Appendix A.

https://www-pub.iaea.org/MTCD/Publications/PDF/Pub1682_web.pdf https://www-pub.iaea.org/MTCD/Publications/PDF/SVS-32_web.pdf

We anticipate this project will require up to twelve (12) months to be completed. All the tasks below should fit within this timeframe.

The timelines herein are for initial planning purposes unless otherwise agreed to with the CPUC Contract Manager.

Task 1: Coordination and Monthly Progress Reports

The Contractor will manage and execute the SCA in close collaboration with CPUC Contract Manager. The Contractor will develop the detailed workplans, schedules, and assessment activities for conducting the SCA. The CPUC Contract Manager will facilitate and assist with the coordination with SDG&E and its contractors.

Key Responsibilities:

1. Conduct Kick-off Meeting: Plan and conduct a kick-off meeting with CPUC and SDG&E to introduce the SCA purpose, approach, roles, and responsibilities. The session should align with the guiding principles established in Decision D.25-01-031.

2. Participate in Ongoing Coordination: Participate in regularly scheduled coordination meetings with CPUC only, and CPUC and SDG&E jointly. These meetings will be used to coordinate assessment activities, track progress, and proactively identify and resolve potential challenges that may impede or delay effective implementation.

Deliverables:

1. Coordination Meetings:

a. Conduct kick-off meeting (~2 Hours) with CPUC and SDG&E jointly: This will serve as the first coordination meeting.

b. Conduct two (2) meetings (1 hour) per month with CPUC Contract Manager to track progress, identify issues and concerns and coordinate SCA activities. The frequency of meetings can be decreased based on the need of the project.

c. Conduct two (2) coordination meetings per month (1 hour) with CPUC and SDG&E jointly to track progress, address issues and concerns, and coordinate SCA activities. The frequency of meetings can be decreased based on the need of the project.

2. Monthly Status Reports: Submit a written monthly Status Report to the CPUC

Contract Manager summarizing all activities conducted during the prior 30 days.

Status Reports can be delivered as PowerPoint presentations. (We anticipate that the 12-month project will require 12 monthly summary reports). Each Status Report shall include:

a. Overview of Activities

i. Summary of all work performed in the reporting period.

b. Updates on Stakeholder and Assessment Plans from Task 2

i. Progress on tasks and milestones achieved.

ii. Issues encountered and updates to the schedule.

iii. Any changes to plans and deliverables.

c. Update on Data Collection from Task 3

i. Progress on tasks

ii. Milestones achieved

iii. Issues and updates to schedule

iv. Any changes to the Plans

v. Preliminary report on Data Collection findings

d. Update on Data Analysis from Task 4

i. Progress on analytical tasks.

ii. Milestones achieved.

iii. Issues encountered and updates to the schedule.

iv. Any changes to the plans and deliverables.

v. Preliminary findings report from Data Analysis.

e. Update on Final Report from Task 5

i. Progress on tasks

ii. Milestones achieved

iii. Issues encountered and updates to the schedule

iv. Any changes to plans.

f. Update on Task 7(if required)

i. Progress on tasks

ii. Milestones achieved

iii. Issues encountered and updates to the schedule

iv. Any changes to plans.

Task 2: Planning and Preparation

The Contractor will be the project manager and administrator of the SCA, responsible for ensuring effective planning, organization, and coordination of all activities leading up to the implementation of the Assessment.

1. Understand Regulatory Requirements: Review and apply all CPUC requirements, guidance, and expectations relevant to the SCA.

2. Define Assessment Goals and Scope: Collaborate with CPUC to define clear, measurable assessment goals and scope, ensuring alignment with the CPUC’s SCA Framework.

3. Develop SCA Assessment Plan and Schedule: Create a detailed plan and schedule for implementing the SCA, including milestones, timelines, and dependencies.

4. Design and Execute Stakeholder Engagement Plan: Develop and execute a customized communication plan to inform and engage key stakeholders throughout the assessment process. The plan should address communications related to the safety culture assessment process, preliminary cultural results, and summary findings.

5. Support SDG&E Communication Efforts: Coordinate with SDG&E to complement and strengthen the utility’s internal communication and engagement activities, promoting workforce understanding and cooperation during the Assessment.

6. Select and Adapt Assessment Tools: Identify, select, and adapt assessment tools to suit the operational and organizational context of a large, regulated electric and gas utility.

7. Regular Updates: Contractor will provide updates to these plans as part of the Status Reports in Task 1.

1. Stakeholder Engagement Plan: The Contractor will develop and implement a Stakeholder Engagement Plan to actively engage the relevant assessment stakeholders throughout the assessment process.

a. The plan shall build meaningful support and participation from SDG&E’s workforce.

b. The Contractor shall coordinate with SDG&E to deliver an integrated approach stakeholder engagement approach and provide guidance and advisory support to enhance SDG&E’s own internal engagement efforts.

c. The Stakeholder Engagement Plan shall be delivered no later than 1 month after the contract start date.

2. Assessment Plan: Contractor will develop a detailed Assessment Plan that outlines:

a. The work breakdown structure, timing, approach;

b. Requirements for access to SDG&E data, resources, and personnel;

c. Discrete tasks, milestones, and deadlines; and

d. Roles and responsibilities of all involved parties. The Assessment Plan should be coordinated with SDG&E, as needed, and approved by CPUC Contract Manager prior to implementation.

e. The Assessment Plan shall be delivered no later than 6 weeks after the contract start date.

3. Data Collection Plan: The Contractor will develop a Data Collection Plan in coordination with SDG&E outlining the data collection approach, strategies, data management processes, timelines, and quality control measures. The Data Collection Plan must be reviewed and approved by the CPUC Contract Manager prior to implementation. The Data Collection Plan shall be delivered no later than 6 weeks after the start of the engagement.

Task 3: Data Collection

The multi-method comprehensive assessment approach requires that the Contractor systematically collect multiple types of data from various sources across SDG&E’s enterprise, including its contractors. The Contractor must develop and execute a plan for collecting and managing the data collection process

1. Conduct Multi-Method Data Collection: Perform multi-method data collection activities to gather both qualitative and quantitative data from SDG&E’s workforce across all organizational levels. Design and implement data collection tools for five

(5) assessment methods based on the IAEA safety culture assessment methodology, and in accordance with best practices and protocols for each method described below in Task 3 deliverables. In accordance with IAEA methodology, each data collection method shall be gathered independently of – not informed by – the other data collection methods, e.g. the survey data does not inform collection of the other data gathering methods. The Data Collection methods shall include

a. Interviews: Conduct one-on-one interviews with key stakeholders across all organizational levels (leadership, management, field staff, and contractors) to gather perceptions of and experiences with the organization’s safety culture.

b. Focus Groups: Conduct facilitated small group discussions to capture perceptions, opinions, and values of a target group. Ensure representation across all workforce segments and relevant operational areas.

c. Surveys/Questionnaires: Develop, prepare and administer confidential safety culture surveys to the workforce across various levels (leadership, management, field staff, and contractors). Obtain CPUC Contract Manager approval on the level of demographic variables to be used before administering the survey.

d. Document Review: Review existing documents, communications, and records related to SDG&E’s safety culture, including policies, procedures, programs, reports, training, governance frameworks, and other formalized safety related documents.

e. Site Observation: Conduct direct observation of daily work activities, meetings, and field operations, including unannounced observations, to assess prevailing work practices, safety behaviors, and adherence to safety protocols.

f. Supplemental Data Collection: Conduct any additional and supplemental data collection efforts necessary to investigate specific areas of focus identified in previous SCAs and/or through preliminary data analysis; and to support:

o Completion of all project components;

o Progress evaluation; and o Validation of Self-improvement evaluation findings, as described in the

Project Overview of this document.

2. Review Existing Information: Review any previous SDG&E SCAs and self-evaluation reports to identify historical trends, key findings, and areas requiring further exploration.

3. Communicate Access Issues: Contractor must promptly notify the CPUC Contract Manager of any challenges encountered in obtaining or accessing SDG&E data, facilities, personnel, or activities necessary to ensure the quality, integrity, and timely completion of the assessment.

1) Data Collection Reports. Within 7 Months after the start of the Contract, or as otherwise agreed to with the CPUC Contract Manager, the Contractor shall deliver a report for each of the methods listed above. Each report shall include

a. A summary of the data collected (e.g., participation rates, data gaps, etc.)

b. Statistics summarizing what was collected.

Task 4: Data Analysis

Following the data collection phase under Task 3, the Contractor shall conduct a comprehensive analysis of all collected data and submit a Data Analysis Report for review by the CPUC and SDG&E.

This report will provide a thorough evaluation of the data obtained through the five assessment methods (interviews, focus groups, surveys, document reviews, and site observations) and will synthesize findings into meaningful insights regarding SDG&E’s safety culture.

Key Responsibilities:

The Contractor will produce a Data Analysis Report that will:

1. Summarize data collection and analysis methods: Summarize the methods used to collect and integrate multiple data types (e.g.; triangulation).

2. Provide analysis of data quality: Analyze the strengths and weaknesses of the data collected, including the data collection methods, processes, and sample size validity.

3. Identify themes in the data: Identify and interpret common themes across data collection methods – supported by examples (e.g., participant quotations, stories, or observations). Identify and interpret thematic differences across data collection methods- supported by examples (e.g., participant quotations, stories, or observations).

4. Assess discrepancies between stated and observed values: (i.e., leadership communications, written policies, documentations) and observed behaviors in practice. Identify any significant patterns of behavior related to safety commitment and risk tolerance.

5. Evaluate cultural assumptions: Identify underlying cultural assumptions that drive SDG&E’s organizational behavior. Develop an overall cultural profile of SDG&E's organization, including separate profiles for gas and electric service.

6. Identify subcultures existing within SDG&E.

7. Highlight key strengths and areas for improvement within SDG&E’s safety culture that influence its safety performance.

8. Capture any additional insights that emerge as part of the data analysis process.

1. Data Analysis Report: A Data Analysis Report shall be delivered within 2 months, or as otherwise agreed to with the CPUC Contract Manager, after the completion of Task 3. The Data Analysis Report shall include the following:

a. A detailed review of the data collection methodology and approach.

b. A comprehensive summary of all data collected and an analysis of the data quality, accuracy, and precision.

c. A review of SDG&E's previous SCA and its self-evaluation plans.

d. A review of the Task 4 Key Responsibilities findings (listed above).

e. An evaluation of the progress made by SDG&E on the specific focus areas identified in the previous SCA, including the effectiveness of SDG&E’s improvement efforts.

f. An assessment of how SDG&E’s self-improvement and monitoring efforts align with the current SCA’s findings and results.

g. The raw data collected in Task 3 (e.g., spreadsheets with survey results, notes from interviews and focus groups, etc.)

h. Redactions to raw data may necessary to protect personal and/or proprietary information. The nature and scope of any redactions shall be approved by the CPUC Contract Manager.

Task 5: Final Assessment Report

Following completion of Tasks 3 and 4, the Contractor shall develop and submit a Final Assessment Report that details all its findings, conclusions, and recommendations. The Final Assessment Report will undergo a review process (detailed below) by CPUC and SDG&E to ensure accuracy, completeness, and practical applicability.

Key Responsibilities:

The Contractor will:

1. Prepare a Draft Final Assessment Report. Develop a detailed report that serves as the foundation for actionable safety culture improvement measures.

Recommendations must be practical, implementable by SDG&E, and should not require the Contractor’s continued involvement following report submission.

The Draft Report will be submitted to both the CPUC and SDG&E for review.

2. Respond to Comments: Address all feedback received from the CPUC and SDG&E on the Draft Final Assessment Report. The Contractor shall prepare a written response summarizing how each comment was addressed and incorporate all necessary revisions into the Final Report.

3. Produce the Final Assessment Report: Upon approval of the revised Draft Report by the CPUC Contract Manager, the Contractor shall finalize and submit the Final Assessment Report to both SDG&E and the CPUC.

1) Draft Final Assessment Report: Within 30 days of completing Task 4, or as otherwise agreed to with the CPUC Contract Manager, the Contractor shall submit a Draft Assessment Report. The Draft Final Assessment Report must include the following components:

a. Executive Summary

b. Background

c. Assessment Objectives and Scope

d. Assessment Methodology

e. Data Analysis Report

f. Assessment Results

g. Conclusion and Recommendations

h. Appendix: Overall summary of the results (to be publicly shared).

i. Appendix: List of records examined

2) Comment Resolution: Respond to and address comments from the CPUC and

SDG&E on the Draft Final Assessment Report as required by the CPUC Contract Manager.

3) Final Assessment Report: Within fifteen (15) calendar days of the CPUC Contract

Manager’s approval of the modifications to the Draft Assessment Report, the Contractor shall submit the Final Assessment Report to SDG&E and the CPUC Contract Manager. This report should be suitable for public release and distribution to the Safety Culture OIR service list.

4) Presentations of Final Results: The Contractor will make at least two presentations on the Final Assessment Results to an audience as determined by

CPUC.

If the CPUC Contract Manager determines that one or more contract extension(s) are necessary following the submission of the Final Report, the Contractor may be required to submit an addendum to the Final Report to address emerging issues or additional questions identified after initial publication.

Task 6: Unanticipated Tasks after Final Report

Following the completion of the Final Assessment Report, the CPUC Contract Manager may, at its discretion, extend or amend the contract to authorize additional work in support of post-assessment improvement activities. Any such additional work shall be completed prior to the commencement of the next scheduled Safety Culture Assessment (SCA). The cost of this task should be no more than 10% or $250,000.00 whichever is lower included in the overall budget estimate for this contract.

The Contractor may be requested to perform the following additional tasks:

1. Post Assessment Support: Provide technical and advisory support to SDG&E and/or the CPUC in connection with the implementation of recommendations outlined in the Final Assessment Report. Such activities may include providing guidance, tools, or frameworks to facilitate SDG&E’s improvement efforts and promote organizational learning.

1) Supplemental Work Plan: Upon the request of the CPUC Contract Manager, the Contractor shall prepare and submit a Supplemental Work Plan describing the proposed additional services. The plan must include:

a. A description of detailed tasks and procedures to accomplish the additional services;

b. Estimated time allocation for each task and/or procedure;

c. Total estimated time and schedule to complete the additional service;

d. Key milestones and associated completion dates, and

e. Estimated budget for the additional services.

Any Supplemental Work Plan is subject to CPUC Contract Manager approval prior to commencement of any additional work.

D. Contractor Responsibilities

The Contractor shall be responsible for ensuring the timely and effective execution of all project activities, deliverables, and reporting requirements as defined in this Statement of Work. Specific responsibilities include:

• Project Manager: Assign a qualified Project Manager who will serve as the primary point of contact for this contract. The Project Manager will be responsible for ensuring the execution of all tasks and deliverables in accordance with the approved schedule.

• Information and Documentation: Provide CPUC staff with all deliverables and relevant background materials used in completing the Statement of Work (SOW).

These may include presentations, research papers, reference materials, data analyses, or spreadsheets.

• Deliverable Format: Provide all reports listed in the SOW to the CPUC Contract Manager in a format as specified by the CPUC Contract Manager

• Communication and Coordination: Ensure CPUC is included in all communication with SDG&E.

• CPUC Observation: Include CPUC representatives as observers of assessment activities, upon the CPUC Contract Manager’s request.

E. CPUC Responsibilities

• Access Facilitation: Facilitate access to technical documents, data, and information necessary for the Contractor to complete the tasks identified in this contract.

• Liaison Role: Serve as a liaison between the Contractor and SDG&E to support efficient communication and coordination.

• Review and Feedback: Provide timely feedback to the contractor on the draft work products.

• Deliverable Approval: Approve all deliverables in accordance with the following acceptance criteria:

o Each deliverable must receive a signed acceptance document from the CPUC Contract Manager before invoices are processed for payment.

o If a deliverable is not accepted, the CPUC Contract Manager shall provide a written rationale within ten (10) business days of receipt of the deliverable.

F. Location

The Contractor shall perform services at both its own facilities and at SDG&E facilities within California. In addition, CPUC may require in-person meetings at CPUC offices located in San Francisco, Sacramento, or Los Angeles.

Meetings may alternatively be conducted remotely, as mutually agreed upon by the CPUC Contract Manager and the Contractor.

G. Term Length

The term of this agreement will be for up to eighteen (18) months with an estimated start date of June 1, 2026, and end date of December 31, 2027.

H. Contract Representative

State Agency:

Contractor:

TBD

Name: Name:

Phone: Phone:

Email: Email:

I. Confidentiality

Contractor may be required to enter into Non-Disclosure Agreements with SDG&E to preserve the confidentiality of the documents and information shared by SDG&E throughout the assessment. All documents and reports produced by the Contractor regarding this assessment shall be deemed confidential pursuant to Section 583 of California Public Utilities Code.

With the permission of the CPUC Contract Manager, Contractor may be required to enter a Non-Disclosure Agreement (NDA) with SDG&E to ensure the confidentiality of documents and information shared by SDG&E throughout engagement.

EXHIBIT B – BUDGET DETAIL AND PAYMENT PROVISIONS

1. Invoicing and Payment

A. Payments

As compensation for the services specified in Exhibit A and upon receipt and approval of Contractor invoices by the CPUC, the Contractor shall be entitled to a sum not to exceed the total dollar amount noted on the STD 213 and/or its Amendment. Payments shall be based on the rates and or schedule as set forth and specified in Exhibit B-1, Cost Sheet which is attached hereto and made a part of this Agreement.

If Contractor discovers it has received an overpayment, Contractor must notify the State and refund the overpayment immediately.

B. Budget Transfer Request

A Budget Transfer Request (BTR) is an informal written statement requesting the movement of existing contract funds from one deliverable to another. The BTR must specify which deliverable’s funding are being adjusted, by how much and include justification for these adjustments. A BTR may be requested by either the Contractor or the CPUC. The BTR must be agreed to in writing by both parties.

The BTR cannot be used to increase the total dollar amount of the Agreement or add new deliverables to the Scope of Work.

C. Invoice Details Each invoice shall include the following details:

I. Contract Number II. Contractor Name

III. Contractor Billing Address IV. Itemized Cost Per Deliverable V. A Summary of each Deliverable worked on including the Names and

Number of Hours worked by each Team Member.

VI. Total Invoice Amount

VII. Invoice Number VIII. Invoice Date

IX. Service Date(s) X. Contact Information

XI. Retention Amount to be Withheld XII. SB/DVBE Certification Number

Any invoiced items which are not included in the accepted Cost Sheet, will automatically be rejected, and denied for payment.

Should an invoice be disputed, Contractor will correct any/all disputed items on the invoice and resubmit the invoice as indicated above. Failure to provide and resubmit corrected invoice will result in a delay of payment.

D. Invoice Submission

Contractor shall submit the invoice in duplicate (including original invoice) not more frequently than monthly in arrears to:

APInvoice@cpuc.ca.gov

OR

California Public Utilities Commission

Fiscal Office, Room 3000 505 Van Ness Avenue

San Francisco, CA 94102 ATTN: Account Payable Technician

E. Travel

Travel costs will not be reimbursed by CPUC separately. Contractor’s rates shall include all travel expenses required to perform the services in accordance with this Agreement.

F. Reporting Requirement of Small Business and DVBE Subcontractors The Contractor invoices shall include a subtotal that enumerates the amounts spent on DGS certified Small Business and DGS certified DVBE subcontractors for the period of the invoice, and a total-to-date for Small Business and DVBE spending. This requirement is in addition to reporting requirement of Section 19 of Exhibit C, General Terms and Conditions.

Pursuant to Mil. & Vet. Code Section 999.7, ten thousand dollars ($10,000) will be withheld from the final payment, or the full final payment if less than ten thousand dollars ($10,000), until the prime contractor complies with the certification requirements of subdivision (d) of Mil. & Vet. Code Section 999.5. This requires the Prime contractor to fill out and submit a STD 817 form certifying the actual amount paid to DVBE subcontractors. Prime contractor shall be given 30 days’ notice to cure the defect. If, after 30 calendar days from the date of notice, the prime contractor refuses to comply with the certification requirements, CPUC shall permanently deduct ten thousand dollars ($10,000) from the final payment, or the full payment if less than ten thousand dollars ($10,000).

G. Progress Payments and Retention Withholdings

Progress payments will be made on the basis of completion of specific deliverables or sub-deliverables, subject to the approval of CPUC. Ten percent (10%) retention shall be withheld from each invoice including billable hours and expenses. The retention shall become payable upon the satisfactory completion of the Agreement or at the completion of mailto:APInvoice@cpuc.ca.gov each separate deliverable if the specific deliverable is not a foundation for succeeding deliverables leading to the completion of a finished project, report, or plan.

H. Retention of Records and Audit Requirement

The Contractor’s invoices will be subject to a financial audit by CPUC at any time within three (3) years of completion of the work.

2. Budget Contingency Clause

A. It is mutually agreed that if the Budget Act of the current year and/or any subsequent years covered under this Agreement does not appropriate sufficient funds for the program, this Agreement shall be of no further force and effect. In this event, the CPUC shall have no liability to pay any funds whatsoever to Contractor or to furnish any other considerations under this Agreement and Contractor shall not be obligated to perform any provisions of this Agreement.

B. If funding for any fiscal year is reduced or deleted by the Budget Act for purposes of this program, the CPUC shall have the option to either cancel this Agreement with no liability occurring to the CPUC or offer an agreement amendment to Contractor to reflect the reduced amount.

3. Prompt Payment Clause

Payment will be made in accordance with, and within the time specified in, Government Code Chapter 4.5, commencing with Section 927.

EXHIBIT C – GENERAL TERMS AND CONDITIONS (GTC 04/2025)

The General Terms and Conditions, GTC 02/2025 will be included and adhere to in the Agreement by reference to the following link:

https://www.dgs.ca.gov/OLS/Resources/Page-Content/Office-of-Legal-Services-Resources-List- Folder/Standard-Contract-Language

If Contractor does not have Internet access, a hard copy will be provided by contacting the State’s Contract Manager listed in the scope of work.

https://www.dgs.ca.gov/OLS/Resources/Page-Content/Office-of-Legal-Services-Resources-List-Folder/Standard-Contract-Language https://www.dgs.ca.gov/OLS/Resources/Page-Content/Office-of-Legal-Services-Resources-List-Folder/Standard-Contract-Language

EXHIBIT D – SPECIAL TERMS AND CONDITIONS

1. Excise Tax

The State of California is exempt from federal excise taxes, and no payment will be made for any taxes levied on employees' wages. The State will pay for any applicable State of California or local sales or use taxes on the services rendered or equipment or parts supplied pursuant to this Agreement. California may pay any applicable sales and use tax imposed by another state.

2. Dispute Resolution

A dispute for purposes of this section is a disagreement between Contractor and CPUC in the performance of the Agreement, which is unable to be resolved between Contractor and Program Staff (“Dispute”). In the event of a Dispute, Contractor shall file a "Notice of Dispute" with the California Public Utilities Commission, Executive Director, or designee within ten (10) days of discovery of the problem. Within ten (10) days, the Executive Director or designee shall meet with the Contractor and Contract Manager for purposes of resolving the dispute. The decision of the Executive Director or designee shall be final.

In the event of a dispute, the language contained within this Agreement shall control over any other.

State reserves the right to issue an order to stop work in the event that a dispute should arise, The stop work order will be in effect until the dispute has been resolved.

3. Subcontracts

A. No work shall be subcontracted without the prior approval of the State’s Contract Manager.

Upon termination of any subcontract, the State shall be notified immediately.

B. If the terminated subcontractor is a DVBE, the contractor must replace that subcontractor with another DVBE subcontractor, and such replacement must be approved by the Commission. Failure to adhere to DVBE Participation will be reported to DGS DVBE program for possible enforcement action, including without limitation be cause for contract termination and recovery of damages under the rights and remedies due the state under the default section of the contract.

C. Nothing contained in this Agreement or otherwise, shall create any contractual relation between the State and any subcontractors, and no subcontract shall relieve the Contractor of his responsibilities and obligations hereunder. The Contractor agrees to be as fully responsible to the State for the acts and omissions of its subcontractors and of persons either directly or indirectly employed by any of them as it is for the acts and omissions of persons directly employed by the Contractor. The Contractor's obligation to pay its subcontractors is an independent obligation from the State's obligation to make payments to the Contractor. As a result, the State shall have no obligation to pay or to enforce the payment of any moneys to any subcontractor.

D. It is the intention of the parties than no subcontractors shall be deemed an employee of the State. Contractor agrees to take any and all actions necessary to comply with this intention.

E. Failure of a subcontractor to perform for any reason shall not relieve Contractor of the responsibility for competent and timely performance of duties under this contract.

4. Commission Staff

Commission staff will be permitted to work side by side with Contractor’s staff to the extent and under conditions directed by the Commission’s Contract Manager. In this connection, Commission staff will be given access to all data, working papers, etc., which Contractor may seek to utilize.

Contractor will not be permitted to use State personnel for the performance of services which are the responsibility of Contractor.

5. Commencement of Work

Performance will start not later than five (5) business days, or on the express date set by the State and the Contractor, after all approvals have been obtained and the agreement is fully executed. Should the Contractor fail to commence work at the agreed upon time, the State upon five (5) days written notice to the Contractor, reserves the right to terminate the agreement. In addition, the Contractor will be liable to the State for the difference between Contractor's bid price and the actual cost of performing work by another contractor.

6. Ownership of Data

Data developed for this contract shall become the property of the State. Contractor shall not disclose data without the permission of the Commission’s Contract Manager. Each report shall also become the property of the State and shall not be disclosed except in such manner and such time as the Commission’s Contract Manager may direct, with the exception of data which have become part of the public records of the State, as discussed in section 8.

7. Confidentiality and Data Safeguards

DEFINITIONS:

7.1 Confidential Information means any non-public information, whether in written, oral, graphic, electronic or any other form, including without limitation, unpublished financial information, state plans and practices, and projections, and marketing data, business, financial, technical information, user manuals, forecasts, analyses, software and processes, or information which would be deemed by a reasonable person to be confidential or proprietary in nature.

Confidential Information also means an individual’s health, genetic or biometric information, race, ethnic origin, sexual orientation, religious or political, beliefs/affiliation, or criminal record.

The contracting state agency may also designate information as “Confidential” or “Proprietary.”

7.2 Personal Information as set forth in Civil Code section 1798.3, subdivision (a) of the California Information Practices Act (§1798 et. seq) means any information that is maintained by an agency that identifies or describes an individual, including, but not limited to, their name, social security number, physical description, home address, home telephone number, education, financial matters, and medical or employment history. It includes statements made by, or attributed to, the individual.

7.3 State Data means all information and data owned by the State and submitted to, processed by, or stored by the Contractor and includes, but is not limited to, all data/information that originated with the State, all data/information provided by the State, and data/information generated, manipulated, produced, reported by or otherwise emanating from or by applications run by the State. State Data encompasses Confidential Information and Personal Information.

7.4 Security Incident means any actual or suspected unauthorized access, destruction, loss, theft, use, modification, or disclosure of State Data.

DATA PRIVACY AND CONFIDENTIALITY:

7.5 Contractor shall not collect, use, retain, disclose, sell or otherwise make use of State Data for Contractor’s own commercial purposes or in a way that does not comply with the purpose of this Contract or applicable law. If an applicable law requires Contractor to disclose State Data, the Contactor must first inform the State of the legal requirement and give State an opportunity to object or challenge the requirement, unless the applicable law prohibits such notice.

7.6 Contractor shall ensure confidentiality and security of State Data. Contractor shall ensure that all its personnel as well as personnel of its subcontractors with access to State Data comply with security and confidentiality obligations set forth in the Contract.

7.7 Contractor will not disclose State Data or allow access to such information to any third party without the State’s prior written consent; provided, however, that Contractor may disclose State Data to its affiliates and subcontractors for purposes of providing the services to the State under this Contract. Contractor will be liable for all actions by the subcontractor related to the use, processing and/or disclosure of State Data.

7.8 Contractor will return or render permanently unreadable and unrecoverable all State Data at the end of this Contract or upon the State’s written request unless State Data must be retained by Contractor to comply with applicable laws. Erasure or destruction of all State Data in Contractor’s possession shall be in accordance with State’s standard for data destruction, which State shall provide to Contractor. If requested, Contractor shall provide certification of destruction to State.

DATA PROTECTION:

7.9 Contractor shall implement and maintain all appropriate administrative, physical, technical, and procedural safeguards in accordance with applicable laws, policies, and regulations at all times during the Contract term to protect State Data, systems, and services, from unauthorized or unlawful use, access, modification, disclosure or destruction, introduction of viruses, disabling devices, malware and other forms of malicious or inadvertent acts.

7.10 Unless otherwise specified in the Contract or Statement of Work, upon discovery or reasonable belief of any Security Incident, Contractor shall notify the State in writing by the fastest means available, in no event greater than 48 hours after such discovery or belief.

Contractor’s notification shall identify, to the full extent known to Contractor:

a. The nature of the Security Incident;

b. The State Data improperly accessed, used, or disclosed;

c. The individual records improperly accessed, used, or disclosed if Confidential

Information or Personal Information is involved;

d. The person(s) who improperly accessed, used, disclosed or received State Data;

e. What Contractor has done or will do to quarantine and remediate the Security Incident;

and

f. What corrective action(s) Contractor has taken or will take to prevent future Security

Incidents.

7.11 Contractor shall take prompt corrective action to mitigate any risks or damages involved with the Security Incident.

7.12 If Contractor experiences a Security Incident, the State shall determine whether notification to any individuals whose State Data has been improperly accessed, lost or breached is appropriate. If Confidential Information or Personal Information is reasonably believed to have been improperly accessed or acquired by an unauthorized person as a result of a Security Incident that is not due to the fault of the State or any person or entity under the control of the State, Contractor shall bear any and all costs associated with the State’s notification obligations as required by all applicable laws and regulations, as well as the cost of credit monitoring.

Contractor shall immediately investigate the Security Incident and shall share the investigation report with the State.