EINF90425 RFQ-ITS Physical Security Assessment Services

The California State Controller's Office (SCO) has issued Request for Quote EINF90425 for IT Physical Security Assessment Services, a professional services procurement seeking a contractor to provide comprehensive physical security systems and program consulting services. The scope encompasses evaluation of SCO's physical security controls, systems, and applications across seven facilities located in Sacramento, San Francisco, and Los Angeles, including assessment of access control, video surveillance, and intrusion detection systems and their supporting infrastructure. Services must align with industry standards, particularly NIST 800-53 Physical and Environmental Protection controls, and be delivered through both remote and onsite engagement. Deliverables consist of three components: an initial review of controls and infrastructure, a detailed analysis of controls and infrastructure, and a final report with findings, recommendations, and improvement plans across one-year, three-year, and five-year timeframes. Key staff must demonstrate a minimum of three years of experience within the past five years as a consultant performing IT physical security assessments and must have been employed by the bidding firm for at least one year; desirable qualifications include industry certifications such as Certified Protection Professional (CPP), Physical Security Professional (PSP), Industrial Security Professional (ISP), and Physical Security Certification (PSC). The procurement schedule includes a written questions deadline of April 27, 2026 at 2:00 PM Pacific Time, final bid submission due May 11, 2026 at 2:00 PM PT, mandatory interviews scheduled for May 20-21, 2026, cost opening on May 22, 2026, notice of intent to award anticipated May 25, 2026, and agreement award and anticipated start date of June 1 and June 22, 2026, respectively. Evaluation criteria include technical qualifications (pass/fail requirements including at least one prior IT physical security assessment engagement within the past two years), reference scoring, interviews valued at 90 points, and cost valued at 250 points out of 500 total points.

Bidders must be California-certified Small Businesses, Micro Businesses, or Disabled Veteran Business Enterprises to claim applicable preferences, with a five percent Small Business preference and up to five percent DVBE incentive available to qualifying firms. Required submissions include a letter of guarantee, current business licenses or incorporation documents, proof of required certifications, three bidder references, three references per key staff member, and a detailed cost proposal addressing all labor, supplies, equipment, travel, and associated costs necessary to complete the three deliverables. All proposed key staff must pass Live Scan background checks as a mandatory requirement. The RFQ does not identify incumbent vendors or existing contractor relationships requiring transition, though proposers must demonstrate familiarity with the existing physical security infrastructure at the seven SCO facilities. The agreement term is one year with SCO retaining the right to amend for additional time, funds, modified locations, or adjusted scope at its exclusive discretion, though the specific contract value or budget range is not disclosed in the available procurement documents.