RFP-CIP Enterprise Security Awareness Training
- The Michigan Department of Technology, Management and Budget (DTMB) issued this Request for Proposal to procure comprehensive hosting, maintenance, support, and future enhancement services for the Michigan Integrated Continuous Improvement Process (MICIP) Platform, a web-based continuous improvement planning system serving Michigan's education sector. The contractor must host and maintain the live platform using Amazon Web Services as a permitted subcontractor in a Contractor-hosted environment,...
- The Michigan Department of Treasury is soliciting competitive proposals to develop a comprehensive Citizen's Guide to Infrastructure Systems on behalf of the Michigan Infrastructure Council (MIC). This Request for Proposal (RFP No. 2600000001781) seeks a qualified contractor to create educational materials that equip Michigan citizens with knowledge about infrastructure systems, asset management practices, and the importance of sustained infrastructure investment. Primary deliverables include...
The Michigan Department of Technology, Management & Budget (DTMB) is issuing an RFP (No. 260000001298) for a vendor-hosted Software-as-a-Service (SaaS) enterprise security awareness training solution serving approximately 60,000 State of Michigan employees and contractors. The procurement seeks a comprehensive platform providing role-based security training, phishing simulation exercises, and automated remediation training addressing current and emerging threats including phishing, social engineering, whaling, AI-driven attacks, credential harvesting, malware, ransomware, and physical security awareness. Deliverables include a SaaS platform serving as the primary learner interface for training delivery and tracking across state agencies, customizable Michigan-specific scenarios and templates, course completion certificates, email notifications, and comprehensive reporting metrics (emails delivered, opened, clicked, and reported). The solution must support concurrent access for 50,000+ employees with read access, 12 administrators with admin access, and 10,000+ approved third-party contractors; integrate with Microsoft Active Directory for user account imports; achieve 99.98% availability with 2-4 second page load response times and 2-second response times for 98% of transactions; comply with FISMA and NIST special publication standards; and include accessibility compliance with ACR/VPAT documentation for core training modules. Proposals will be evaluated on technical criteria totaling 100 points: Project Scope and Statement of Work (30 points), Solution Requirements and Specifications (40 points), Staffing and Personnel (15 points), and Company Background (15 points); proposals scoring 80 or more points will advance to pricing evaluation. Key dates include a bidders' question deadline of April 27, 2026, answers posted May 4, 2026, proposal submission deadline of May 26, 2026 at 11:59 p.m. Eastern Time, and anticipated contract begin date of December 17, 2026. The RFP does not specify set-aside designations or restrictions on organization types eligible to respond. The contract term consists of a five-year base period with five optional one-year renewal periods; no incumbent vendor or current contractor information is provided in the available documentation. The solution must integrate with the State's MiLogin identity federation system and Azure Federation, and all proposed software terms and third-party hosted solutions must comply with the State's Software Terms & Conditions and Data Security Requirements, with third-party terms deemed unacceptable. Contractors must provide their own Project Manager, Security Officer, and Contract Administrator; offshore resources are prohibited, and subcontractors require prior State approval and disclosure. Pricing proposals must include subscription or perpetual licensing fees covering all users, annual support service fees, implementation fees as firm fixed costs with detailed breakdown and payment schedule, hosting fees for contractor-hosted solutions, post-production warranty at no cost during the subscription term, and hourly rate cards for ancillary professional services. No specific budget range or award value is stated in the available documentation; however, any contract valued at $250,000 or greater requires State Administrative Board approval. All proposals become public record upon receipt.
Name | Description | Size | Type | Posted |
|---|---|---|---|---|
CIP ENTERPRISE SECURITY AWARENESS TRAINING Bidder Q&A Posted 5.4.26.docx | 27KB | Document | 5/4/26 | |
Security Awareness Training RFP 260000001298.docx | 285KB | Document | 5/4/26 |