RFP # 26-07 Support Services for Information Technology, SCADA, and Industrial Control Systems

The Rivanna Water & Sewer Authority and Rivanna Solid Waste Authority issued RFP #26-07 on May 6, 2026, seeking qualified firms to provide comprehensive support services for Information Technology, Supervisory Control and Data Acquisition (SCADA), and Industrial Control Systems (ICS) across their water, wastewater, and solid waste operations. The procurement encompasses five major service domains: Core IT Systems (enterprise servers, network infrastructure, endpoint support, cybersecurity monitoring, and disaster recovery); SCADA/Industrial Control Systems (PLC and HMI programming, industrial network design, instrumentation integration, and on-call operational support); Business/ERP Financial system support (document management, GIS administration, and asset management systems); General Services (capital project management, emergency response, and temporary staffing); and Cybersecurity Compliance (regulatory alignment with EPA and Virginia Department of Health oversight, IT/OT boundary protections, and incident response coordination). Proposers may respond to one or more service domains and must submit completed labor rate sheets on the provided Labor Rate Sheet (Appendix A), with compensation negotiated on either a time-and-materials or fixed-price basis. The Authority intends to establish a panel of multiple qualified vendors to support more than 30 operational facilities on an as-needed basis, with vendors required to demonstrate the ability to respond to emergency conditions within four hours and provide 24/7 support for nights, weekends, and holidays. The question deadline is May 21, 2026, at 3:00 PM EST, with proposals due May 28, 2026, at 3:00 PM EST, submittable via mail to 695 Moores Creek Lane, Charlottesville, VA 22902-9016, or electronically through the Commonwealth of Virginia's eVA website.

The RFP does not identify specific set-aside designations or restrictions limiting organizational types, and no incumbent vendors or current contractors are listed in the available documentation. The initial contract term is 12 months from the award date with the option for up to four additional 12-month renewals, for a total contract length not to exceed five years, with automatic renewal unless either party provides 30 days' written notice. All selected vendors must sign a non-disclosure agreement and comply with strict cybersecurity requirements, including respect for IT/OT boundary protections and acceptance control policies. Insurance requirements include Commercial General Liability ($2,000,000 general aggregate), Professional Liability ($5,000,000), and Workers' Compensation at Virginia statutory levels. The procurement documents do not specify an overall budget range or award value; compensation will be determined through negotiation based on submitted hourly rates and actual utilization on individual purchase orders and task authorizations. The Authority reserves the right to conduct oral presentations with key personnel and to award contracts to multiple firms based on expertise, availability, and project-specific requirements.