Addendum No 1 Cybersecurity/ Privacy Training (OT25069)

The West Virginia Department of Administration Purchasing Division is seeking a comprehensive Cybersecurity and Privacy Training solution for the West Virginia Office of Technology (WVOT), targeting approximately 25,000 end users across the state government. The Request for Quotation (CRFQ 0231 OOT2500000016) calls for a vendor-managed Learning Management System (LMS) that provides customized security and privacy training, including an integrated phishing simulator. The training must be 30-45 minutes in length, compatible with SCORM 2.0 or higher, support Microsoft LDAP integration, and cover critical topics such as security threats, privacy awareness, HIPAA compliance, and phishing prevention. The LMS must accommodate both internal and external (contractor) users, with the ability to simulate phishing attempts using customizable templates supporting up to 5,000 users. Key solicitation dates include a question submission deadline of February 14, 2025, at 3:00 p.m., and a bid submission deadline of February 25, 2025, at 1:30 p.m. The initial contract term is one year, with three optional one-year renewal periods, and the vendor must deliver contract items within 90 working days of receiving the purchase order.

The solicitation does not explicitly mention specific set-aside designations or restrictions for disadvantaged enterprises. The current environment utilizes the KnowB4 platform for cybersecurity training and an existing WVOT LMS, with user information sourced from Active Directory. Vendors must maintain Commercial General Liability Insurance of $1,000,000 per occurrence and provide firm pricing for the entire contract duration. While the exact budget is not disclosed, vendors are required to submit lump sum costs for the initial contract year and each optional renewal year. The contract will be awarded to the lowest responsible bidder meeting mandatory specifications, with delivery to the WV Office of Technology at Building 5, 10th Floor in Charleston. The procurement is structured as a Central Contract with a fixed amount, and the target start date is immediately following the solicitation close and evaluation process. Pricing will be paid in arrears upon receipt of proper invoices, with the expectation of an expedited implementation to support the state's cybersecurity training needs.