Notice of Intent to Award a Contract for RFP 26-33-03 Cyder Security Assessments of Select State IT Systems

State & local contract opportunity Posted

Solicitation number
RFP 26-33-03
State
Alaska
Responses due
Not on record

Opportunity facts

Jurisdiction

Opportunity details come from aws.state.ak.us. Updated .

About this opportunity

The Alaska Division of Legislative Audit is issuing Request for Proposals 26-33-03 to procure cybersecurity assessment services from qualified information technology security and audit firms. The procurement seeks comprehensive cybersecurity reviews of three select State of Alaska IT systems: MyAlaska (single sign-on and electronic signature platform), MyRnB/Employer Services/eReporting (retirement and benefits management systems), and the New DAIS (Permanent Fund Dividend system). Assessments will be conducted using the National Institute of Standards and Technology Cybersecurity Framework version 2.0 and Center for Internet Security Critical Security Controls version 8.1, with deliverables including asset identification, risk and threat assessments, vulnerability assessments, network architecture evaluation, application security testing, database security review, identity and access management assessment, data protection verification, cloud security evaluation, policy review, physical security assessment, security awareness training evaluation, monitoring and logging analysis, third-party risk management review, and business continuity/disaster recovery planning assessment. Work will be performed on a hybrid basis with approximately 30 percent onsite in Juneau and Anchorage and 70 percent remote, with contract initiation on June 1, 2026, draft reports due September 14, 2026, and final reports due September 30, 2026. The evaluation criteria assign 35 percent weight to understanding of project and methodology, 25 percent to project management plan, 15 percent to firm and staff experience and qualifications, and 25 percent to contract cost. A pre-proposal teleconference is scheduled for March 13, 2026, at 1:00 p.m. Alaska Time, and sealed proposals must be received by March 31, 2026, at 2:00 p.m. Alaska Time. Minimum qualification requirements mandate that supervisory personnel and technical leads hold advanced IT security certifications with at least seven years of experience performing cybersecurity assessments of governmental organizations, and the contractor must not be suspended or debarred by the federal government.

Offerors meeting Alaska residency and business criteria are eligible for an Alaska Bidder Preference of five percent applied prior to cost-to-points conversion. No incumbent contractor is identified for this new solicitation. Cost proposals must be submitted as lump-sum, all-inclusive hourly rates broken down by system and inclusive of all direct and indirect costs, travel, lodging, and per diem for Alaska work. Contractors must maintain Workers' Compensation Insurance, Commercial General Liability Insurance with a minimum $1,000,000 combined single limit, and Commercial Automobile Liability Insurance with a minimum $500,000 combined single limit. Funding is contingent on approval by the Legislative Budget and Audit Committee, with funds available through June 30, 2026, and post-June availability dependent on legislative appropriation. The Notice of Intent to Award is anticipated for April 21, 2026, with contract execution anticipated by May 4, 2026. Prospective offerors must register in writing with Procurement Manager JC Kestel (LAA.Procurement@AKLeg.gov; 907-465-6705) to receive subsequent amendments, with failure to register potentially resulting in rejection of proposals.

Opportunity text

5 versions

Update #5 · Latest ·

****Please see attached notice of intent to award a contract for RFP 26-33-03 Cyder Security Assessments of Select State IT Systems****

Update #4 ·

*****Please see the attached Amendment No. 3 to RFP 26-33-03 that is labeled as "RFP 26-33-03 A3" that was issued by the Agency on 03/25/2026***** *****Please see the attached Amendment No. 2 to RFP 26-33-03 that is labeled as "RFP 26-33-03 A2" that was issued by the Agency on 03/23/2026***** *****Please see the attached Amendment No. 1 to RFP 26-33-03 that is labeled as "RFP 26-33-03 A1" that was issued by the Agency on 03/12/2026***** The Alaska Division of Legislative Audit is seeking sealed proposals from information technology security/audit firms to perform cybersecurity reviews of select State of Alaska IT systems using the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and Center for Internet Security (CIS) controls. Please see attached below: RFP 26-33-03 Cyber Security Assessments of Select State IT Systems for more details about the solicitation. Important Notices to potential Offerors: Pre-Proposal Teleconference: All Prospective Offerors are encouraged to call into the pre-proposal teleconference. This pre-proposal teleconference will be held on Thursday March 13, 2026 at 1:00 pm., Alaska Time. To attend, Offerors must call into the teleconference lines provided within the RFP on page 17. Registration with Procurement Manager: If you are receiving this solicitation from the State of Alaska Online Public Notices website or through email, you must register with the Procurement Manager to receive subsequent amendments. Registration should be in writing and email is preferred. Contact information is shown below. Failure to register with the procurement manager may result in rejection of your offer. Deadline for Receipt of Proposals: Proposals must be received by the Procurement Manager no later than 2:00 P.M. Alaska Time on April 3, 2026. Late proposals will not be accepted. The Alaska State Legislature complies with the Title II of the Americans with Disabilities Act of 1990. Individuals with disabilities who may need auxiliary aids, services, and/or special modifications to submit a proposal should contact the Procurement Manager, no later than ten (10) days before proposals are due to make any necessary arrangements. Contact information is shown below. JC Kestel, Procurement Manager PH: 907-465-6705 TDD: 907-465-4980 Email: LAA.Procurement@AKLeg.gov

Update #3 ·

*****Please see the attached Amendment No. 2 to RFP 26-33-03 that is labeled as "RFP 26-33-03 A2" that was issued by the Agency on 03/23/2026***** *****Please see the attached Amendment No. 1 to RFP 26-33-03 that is labeled as "RFP 26-33-03 A1" that was issued by the Agency on 03/12/2026***** The Alaska Division of Legislative Audit is seeking sealed proposals from information technology security/audit firms to perform cybersecurity reviews of select State of Alaska IT systems using the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and Center for Internet Security (CIS) controls. Please see attached below: RFP 26-33-03 Cyber Security Assessments of Select State IT Systems for more details about the solicitation. Important Notices to potential Offerors: Pre-Proposal Teleconference: All Prospective Offerors are encouraged to call into the pre-proposal teleconference. This pre-proposal teleconference will be held on Thursday March 13, 2026 at 1:00 pm., Alaska Time. To attend, Offerors must call into the teleconference lines provided within the RFP on page 17. Registration with Procurement Manager: If you are receiving this solicitation from the State of Alaska Online Public Notices website or through email, you must register with the Procurement Manager to receive subsequent amendments. Registration should be in writing and email is preferred. Contact information is shown below. Failure to register with the procurement manager may result in rejection of your offer. Deadline for Receipt of Proposals: Proposals must be received by the Procurement Manager no later than 2:00 P.M. Alaska Time on March 31, 2026. Late proposals will not be accepted. The Alaska State Legislature complies with the Title II of the Americans with Disabilities Act of 1990. Individuals with disabilities who may need auxiliary aids, services, and/or special modifications to submit a proposal should contact the Procurement Manager, no later than ten (10) days before proposals are due to make any necessary arrangements. Contact information is shown below. JC Kestel, Procurement Manager PH: 907-465-6705 TDD: 907-465-4980 Email: LAA.Procurement@AKLeg.gov

Update #2 ·

*****Please see the attached Amendment No. 1 to RFP 26-33-03 that is labeled as "RFP 26-33-03 A1" that was issued by the Agency on 03/12/2026***** The Alaska Division of Legislative Audit is seeking sealed proposals from information technology security/audit firms to perform cybersecurity reviews of select State of Alaska IT systems using the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and Center for Internet Security (CIS) controls. Please see attached below: RFP 26-33-03 Cyber Security Assessments of Select State IT Systems for more details about the solicitation. Important Notices to potential Offerors: Pre-Proposal Teleconference: All Prospective Offerors are encouraged to call into the pre-proposal teleconference. This pre-proposal teleconference will be held on Thursday March 13, 2026 at 1:00 pm., Alaska Time. To attend, Offerors must call into the teleconference lines provided within the RFP on page 17. Registration with Procurement Manager: If you are receiving this solicitation from the State of Alaska Online Public Notices website or through email, you must register with the Procurement Manager to receive subsequent amendments. Registration should be in writing and email is preferred. Contact information is shown below. Failure to register with the procurement manager may result in rejection of your offer. Deadline for Receipt of Proposals: Proposals must be received by the Procurement Manager no later than 2:00 P.M. Alaska Time on March 31, 2026. Late proposals will not be accepted. The Alaska State Legislature complies with the Title II of the Americans with Disabilities Act of 1990. Individuals with disabilities who may need auxiliary aids, services, and/or special modifications to submit a proposal should contact the Procurement Manager, no later than ten (10) days before proposals are due to make any necessary arrangements. Contact information is shown below. JC Kestel, Procurement Manager PH: 907-465-6705 TDD: 907-465-4980 Email: LAA.Procurement@AKLeg.gov

Update #1 ·

The Alaska Division of Legislative Audit is seeking sealed proposals from information technology security/audit firms to perform cybersecurity reviews of select State of Alaska IT systems using the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and Center for Internet Security (CIS) controls. Please see attached below: RFP 26-33-03 Cyber Security Assessments of Select State IT Systems for more details about the solicitation. Important Notices to potential Offerors: Pre-Proposal Teleconference: All Prospective Offerors are encouraged to call into the pre-proposal teleconference. This pre-proposal teleconference will be held on Thursday March 13, 2026 at 1:00 pm., Alaska Time. To attend, Offerors must call into the teleconference lines provided within the RFP on page 17. Registration with Procurement Manager: If you are receiving this solicitation from the State of Alaska Online Public Notices website or through email, you must register with the Procurement Manager to receive subsequent amendments. Registration should be in writing and email is preferred. Contact information is shown below. Failure to register with the procurement manager may result in rejection of your offer. Deadline for Receipt of Proposals: Proposals must be received by the Procurement Manager no later than 2:00 P.M. Alaska Time on March 31, 2026. Late proposals will not be accepted. The Alaska State Legislature complies with the Title II of the Americans with Disabilities Act of 1990. Individuals with disabilities who may need auxiliary aids, services, and/or special modifications to submit a proposal should contact the Procurement Manager, no later than ten (10) days before proposals are due to make any necessary arrangements. Contact information is shown below. JC Kestel, Procurement Manager PH: 907-465-6705 TDD: 907-465-4980 Email: LAA.Procurement@AKLeg.gov

Files

File Type Posted
RFP 26-33-03 NIA.pdf PDF
RFP 26-33-03 A3.pdf PDF
RFP 26-33-03 A2.pdf PDF
RFP 26-33-03 A1.pdf PDF
RFP 26-33-03 - Cyber Security Assessments of Select State IT Systems.pdf PDF

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Similar opportunities
  • Ask GovTribe AI about this opportunity