27000542-network security - renewal - okta (brand only)

The State of California is requesting bids for a renewal of Okta-branded network security and identity and access management services, with bids due July 29, 2026. This is a brand-specific, sole-source procurement for Okta solutions only.

The scope covers Okta identity and access management services to support the state's network security infrastructure. The contractor must comply with specified information security and privacy requirements, including NIST-aligned security controls, data protection standards, encryption protocols for data in transit and at rest, multi-factor authentication, segregation of duties, regular security assessments, and audit logging. The contractor must implement incident response procedures with defined notification timelines, maintain cybersecurity insurance, conduct security training for personnel with access to state systems, and report security incidents immediately to designated state contacts. Compliance with California privacy laws and federal requirements such as HIPAA where applicable is mandatory. The contractor must maintain current security certifications and participate in regular security audits conducted by state representatives or third-party assessors. These security and privacy requirements are non-negotiable elements of contract performance.

Bidders must complete and submit standardized state purchasing forms, including a Certified Business Enterprise (CBE) Form and a Certificate of Insurance demonstrating general liability, professional liability, cyber liability, and other coverage meeting specified minimums. The State of California must be named as an additional insured on applicable policies. The contract includes renewal options to ensure continuity of critical security services. Funding derives from the state's information technology and cybersecurity budget allocations. The incumbent vendor relationship with Okta continues through this renewal process.