EINF90125 Physical Security Assessment Services

The State Controller's Office (SCO) of California is issuing a Request for Quote (RFQ) for information technology consulting services to conduct comprehensive physical security assessments across six SCO facilities located in Sacramento County, San Francisco City, and Los Angeles. The contractor will evaluate existing physical security controls, systems, applications, network infrastructure, and architecture aligned with National Institute of Standards and Technology (NIST) 800-53 Physical and Environmental Protection controls. Key deliverables include an Initial Review due within 30 days, an Analysis due within 60 days, and a Final Report with one-year, three-year, and five-year remediation plans due within 90 days, with all work performed during business hours (8:00 a.m. to 5:00 p.m. Pacific Time, Monday through Friday, excluding state holidays). The scope encompasses onsite inspections of specific systems including CCure, ExacqVision, and Bosch Alarms, along with recommendations for video footage retention, business continuity, disaster recovery, and monitoring protocols. Required qualifications include current industry-recognized certifications relevant to IT physical security, successful passage of SCO background checks and security awareness training, and demonstrated experience with the specified security systems. Evaluation criteria include administrative requirements compliance, minimum qualifications, technical qualifications with desirable credentials and references, mandatory interview performance scheduled for February 12-17, 2026, and cost considerations. Bids must be submitted by February 6, 2026, at 2:00 p.m. Pacific Time, with an anticipated award date of February 26, 2026, and an anticipated start date of March 20, 2026.

The SCO offers a five percent incentive for Disabled Veteran Business Enterprise (DVBE) certified firms and a five percent preference for California Small Business (SB) or Micro Business (MB) certified firms, provided that combined preference and incentive programs do not exceed 15 percent of the bid amount or $100,000, whichever is less. The contractor must maintain comprehensive insurance coverage including Commercial General Liability ($1 million per occurrence), Workers' Compensation with $1 million employer's liability, Automobile Liability ($1 million combined single limit), Professional Liability ($1 million per occurrence and $2 million aggregate), and Cyber Liability ($15 million). All deliverables must be provided in Microsoft Office Suite 2016 or later format on malware-free media compatible with Windows-based storage devices, and contractors must utilize SCO-supplied laptops with SCO Security Software Suite for all services. The contractor bears all costs for labor, supplies, equipment, travel, per diem, parking, insurance, licenses, permits, and taxes, with compensation based on itemized monthly invoices submitted in arrears according to rates specified in the Cost Worksheet, subject to ten percent withholding pending determination of agreement fulfillment. While the maximum agreement amount is not explicitly stated, cost evaluation references indicate a sample lowest bid of $600,000 for evaluation purposes. The one-year agreement may be amended by SCO to extend time or modify locations and equipment at SCO's sole discretion and may be terminated by SCO with 30 days' written notice or immediately for cause.