Opportunity
California eProcure #RFP 2026-01
Covered California Information Security Services Solicitation
Posted
July 30, 2026
Respond By
September 01, 2026
Identifier
RFP 2026-01
NAICS
541512, 541519
Covered California, the state health benefit exchange, is seeking a contractor to deliver comprehensive Information Security Services to support its strategic initiatives. - Government Buyer: - Covered California (California Health Benefit Exchange) - Contact: Joyce Anne Asper - Scope of Services: - Full-time and project-based information security services - Risk management, compliance, and development/maintenance of security policies, procedures, and standards - Security engineering and architecture - Incident response and third-party risk management - Technical security advisory and implementation - Threat detection, log monitoring, and data protection - Independent security and privacy assessments - Penetration testing and digital forensics - Notable Requirements: - Contractor must provide a qualified team with expertise in governance, risk, compliance, cloud security, and regulatory standards (e.g., ARC-AMPE, IRS Publication 1075) - Services must align with Covered California's information security program objectives - Maximum contract value is $12.5 million over five years, with an option to extend for two additional years - Funding is subject to annual budget approval - OEMs and Vendors: - No specific OEMs or vendors are named in the solicitation - Products/Services Requested: - Comprehensive suite of information security services (see above) - No specific product part numbers or quantities provided
Description
This solicitation seeks proposals from qualified contractors to support Covered California's Information Security strategic initiatives and projects. The contract involves providing full-time and project-based services including risk management, compliance, security policies and standards, security engineering and architecture, incident response, third-party risk management, technical advisory services, threat detection, log monitoring, and data protection. The goal is to enhance and maintain the information security program for Covered California.