Cyber Incident Response Services

The Teacher Retirement System of Texas (TRS) issued a Request for Proposals on May 4, 2026, to procure comprehensive Cyber Incident Response services to address major unplanned cyber events including malware, ransomware, data breaches, account compromises, and Denial of Service attacks. The scope of work encompasses three main service categories: Kickoff and Environment Familiarization, Incident Response Preparation, and Cybersecurity Incident Response Services. Key deliverables include incident response retainer services with standard hours labor (160 hours estimated), after-hours emergency labor (60 hours estimated), one tabletop exercise, two incident reports with executive readouts, two per-incident response fees, and digital forensic analysis for approximately 20 hosts. Mandatory qualifications require incident response team members to hold CISSP, GIAC GCIH, or ECIH certifications; provide 24/7/365 availability; deliver services without requiring TRS to use specific technical solutions; employ only full-time respondent employees; comply with data sovereignty requirements maintaining all data within the continental United States; and station team members at TRS locations (Austin, El Paso, London, and future regional offices) within 24 hours. Evaluation will be conducted using best value standards weighted at 35 percent for past performance and client references, 25 percent for key personnel, 30 percent for proposed performance details, and 10 percent for proposed pricing. A pre-proposal conference is scheduled for May 13, 2026, at 10:00 a.m. Central Time (non-mandatory), with questions due by May 13, 2026, at 5:00 p.m. Central Time, and proposals due June 5, 2026, at 3:00 p.m. Central Time. Top-ranked respondents may be requested to participate in presentations during the week of June 15, 2026.

The solicitation does not specify any set-aside designations or restrictions limiting participation to disadvantaged enterprises, and no incumbent vendors or current contractors are identified in the available documentation. Respondents must propose fully loaded, firm, fixed prices or hourly rates inclusive of all costs of performance, materials, equipment, labor, communication, and planning, with travel, meals, and lodging incorporated into proposed pricing, though direct travel costs may be reimbursable on a case-by-case basis with prior written approval limited to State of Texas per diem rates. Price escalation is not permitted for the three optional one-year renewal terms. TRS determined that no probable subcontracting opportunities exist and therefore does not require a VETHUB Subcontracting Plan unless respondents intend to subcontract services. The initial contract term is one year from the effective date with three optional one-year renewal terms available, and the initial contract value is anticipated to exceed $100,000 over its life.