Notice of Intent to Award for RFP 250000002120

The Michigan Department of Treasury issued Request for Proposal (RFP) 250000002120 seeking Qualified Security Assessor Services to maintain Payment Card Industry (PCI) compliance. The procurement requires bidders to be certified Qualified Security Assessors capable of performing on-site PCI Data Security Assessments for Level 1 & 2 Merchants and Level 1, 2, or 3 Service Providers. The RFP was initially posted on SIGMA VSS on April 21, 2025, with proposals due by May 19, 2025. Four bidders submitted proposals: Coalfire Systems Inc., Online Enterprises Inc. dba Online Business Systems, RubinBrown LLP, and True North Consulting Group, LLC. The contract term is 3 years with up to 3 additional 1-year renewal options. The evaluation process involved a technical review by a Joint Evaluation Committee, with proposals scoring 80 or higher being considered for award. Proposals were evaluated based on technical expertise, comprehensiveness of responses, and alignment with state requirements, with a maximum technical score of 100 points.

No bidders were identified as Service-Disabled Veteran Owned Businesses or Geographically Disadvantaged Business Enterprises. The Michigan Department of Treasury recommends awarding the contract to Online Enterprises Inc. dba Online Business Systems for $348,275, pending State Administrative Board approval. This vendor was selected based on the highest technical evaluation score of 98/100 and providing the best value to the state. Pricing among bidders varied significantly, with one-year assessment costs ranging from $31,600 to $138,000 and three-year assessment costs ranging from $94,800 to $414,000. The recommended vendor demonstrated comprehensive responses, technical expertise, and strong alignment with the state's specific PCI compliance assessment requirements. The contract will enable the Michigan Department of Treasury to maintain robust payment card industry security standards through professional assessment services.