When is the submission deadline?

Submissions are due August 31, 2026. Questions must be submitted by August 5, 2026.

What is the budget for this RFP?

The published budget is $2,500,000 – $12,500,000.

It was issued by Covered California. The work is located in Sacramento, California, United States.

Who is a good fit for this opportunity?

Established cybersecurity services provider with government or public-sector experience. Team capable of supplying three full-time security professionals and surge personnel. Expertise across infrastructure, cloud, application, identity, endpoint, and data security. Experience with governance, risk, and compliance platforms and regulatory compliance. Proven capabilities in third-party risk, continuous monitoring, insider threat, and data protection.

Information Security Services (Due August 31, 2026)

Overview

Cybersecurity & Data Privacy

Sacramento, California, United StatesPosted: July 31, 2026Deadline: August 31, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

A Sacramento government authority seeks a full-service information security team for a five-year engagement. The work includes security operations, governance and compliance, risk management, data protection, and support for emerging security initiatives.

KEY REQUIREMENTS

BUDGET

Verified

$2,500,000 – $12,500,000

CONTRACT DURATION

60 months

TIMELINE

Request for Proposal Release Date: July 29th, 2026

RFP Questions Due Date and Time: August 5th, 2026

Responses to Questions Posted By: August 10th, 2026

Proposal Due Date and Time: August 31st, 2026

Notice of Intent to Award: Week of September 16th, 2026

Anticipated Contract Term: December 1st, 2026 to November 30th, 2031

QUESTION DEADLINE

August 5, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

Covered California

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

A government authority in Sacramento, California, seeks a qualified provider of information security services for a five-year contract period. The selected contractor must provide a team of three full-time security professionals, including a designated manager responsible for overall oversight, coordination, quality control, and staffing matters.

The contractor will provide additional qualified personnel as needed for special projects, surge efforts, and implementation of new security capabilities. Responsibilities include developing, updating, and maintaining security policies, procedures, standards, and related documentation, as well as supporting the administration and use of a governance, risk, and compliance platform.

The team must demonstrate expertise in network, endpoint, vulnerability, identity and access, cloud, and application security; log aggregation and analysis; threat detection; response tuning; and operational reporting. Required experience also includes third-party security due diligence, risk assessments, contract and control reviews, continuous monitoring, vendor compliance reporting, data discovery and classification, insider threat support, data loss prevention, encryption, and access controls. Questions must be submitted by August 5, 2026.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due August 31, 2026. Questions must be submitted by August 5, 2026.
What is the budget for this RFP?: The published budget is $2,500,000 – $12,500,000.
Who issued this RFP?: It was issued by Covered California. The work is located in Sacramento, California, United States.
Who is a good fit for this opportunity?: Established cybersecurity services provider with government or public-sector experience
Team capable of supplying three full-time security professionals and surge personnel
Expertise across infrastructure, cloud, application, identity, endpoint, and data security
Experience with governance, risk, and compliance platforms and regulatory compliance
Proven capabilities in third-party risk, continuous monitoring, insider threat, and data protection

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works