EWEB ITB 25-182-PSC NERC CIP Compliance Evaluation and Roadmap

The Eugene Water & Electric Board (EWEB) is seeking a qualified consultant to conduct a comprehensive NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) Compliance Evaluation and Roadmap. This procurement is specifically targeting a technical consultant with demonstrated expertise in NERC CIP standards to support compliance readiness following the loss of EWEB's Low Impact entity exemption. The project will be executed in two potential phases, with the first phase involving a review of EWEB's Bulk Electric System (BES) asset inventory and a preliminary Impact Rating analysis, including validation of CIP-002-8 criteria and delivery of an Impact Rating Validation Report. If the impact rating changes from Low to Medium or High, the project will proceed to Phase II, which includes a detailed gap assessment, roadmap development, and ongoing consultation. Proposal submissions are due on October 28, 2025, at 2:00 PM PT, with the contract period anticipated from December 1, 2025, through December 31, 2026. Evaluation criteria will assess proposers on experience, project approach, team capability, pricing, and references, with a total possible score of 100 points. Required deliverables include the Impact Rating Validation Report, Gap Assessment Report, draft and final roadmaps, and advisory support through virtual stakeholder meetings.

The solicitation does not specify explicit set-aside designations or restrictions on respondent types, suggesting the procurement is open to a broad range of qualified consulting firms with NERC CIP expertise. No incumbent vendors are mentioned in the documentation. The total not-to-exceed compensation will be determined during the proposal process, with the contract structured to accommodate potential extensions. The project's scope indicates a need for deep technical understanding of NERC CIP-002-8 compliance requirements, suggesting that only specialized energy sector consultants with specific regulatory compliance experience will be competitive. While a precise budget range is not disclosed, the comprehensive two-phase approach and potential for ongoing consultation suggest a significant investment in achieving compliance readiness. The virtual nature of stakeholder meetings and the project's focused technical objectives indicate a preference for consultants with both regulatory knowledge and technological capability to assess and recommend infrastructure compliance strategies.