Cybersecurity Operations, HIPAA Security Program Management and Managed IT Services
- Client
- Georgetown, Texas
- RFP Number
- ITES-11138
- Posted
- 10/14/2026
- Category
- IT Services (Computer Maintenance and Technical Services)
- Budget
- Looking for Proposal
- NAICS
- —
- Set-aside
- —
- Contact
- —
Description
AI GeneratedThe Williamson County Children's Advocacy Center (WCCAC) requires managed IT services, cybersecurity operations, and HIPAA security program management in Georgetown, Texas. Requested services include 24x7 network monitoring, firewall management, workstation support for 75–85 devices, patch management, Microsoft 365 administration, help desk support, a 24x7 Security Operations Center, system audits, and personnel security training. Only onshore USA organizations are eligible to submit proposals for this offsite performance requirement. Applicants must submit proposals electronically to Darlene Lewis at [email protected] by 12:00 p.m. noon Central Time on October 23, 2026. All questions regarding the solicitation must be submitted by October 19, 2026. Submissions must include Attachments A through K, covering pricing, references, technical approach, HIPAA compliance, incident response, and staffing matrices. An evaluation committee will evaluate proposals based on a 100-point scale evaluating technical approach and understanding of requirements (30 points), healthcare and HIPAA experience (25 points), healthcare/HIPAA program experience (15 points), references and past performance (10 points), and pricing and overall value (10 points). The anticipated contract start date is November 2, 2026, with vendor invoicing occurring monthly in arrears. Pricing proposals must include all labor, tools, licensing, travel, overhead, and insurance costs.
Key solicitation details
AI-extracted from WCCAC_RFP_Managed_IT_Cybersecurity_HIPAA_10.09.2026.pdf. Confirm against the original documents before bidding.
Williamson County Children's Advocacy Center is soliciting proposals for managed IT services, cybersecurity operations, and HIPAA Security Program management. Qualified firms must be USA-based organizations supporting 50 to 60 users across workstations, firewalls, and cloud infrastructure.
- Issued by
- Williamson County Children’s Advocacy Center
- RFP Release
- Friday, October 9, 2026
- Deadline for written questions
- Friday, October 16, 2026, by 12:00 p.m. Central Time
- WCCAC responses / addenda anticipated
- Monday, October 19, 2026
- Proposal Due
- Friday, October 23, 2026, by 12:00 p.m. noon Central Time
- Interviews or clarifications, if required
- October 23-26, 2026
- Anticipated notice of award
- Thursday, October 29, 2026
- Anticipated Contract Start
- Monday, November 2, 2026
- How to submit
- Electronic via email
- Submission details
- Submit one complete electronic proposal package in searchable PDF format to Darlene Lewis at [email protected].
- Contract term
- Initial term of three years beginning November 2, 2026, with up to two additional one-year renewal periods.
- Place of performance
- 1811 S.E. Inner Loop, Georgetown, Texas 78626 (with offsite performance of work).
- Insurance and bonding
- Commercial General Liability: $1,000,000 each occurrence; Professional Liability: $1,000,000 each claim; Cyber/Privacy Liability: $1,000,000 each claim; Workers Compensation: Statutory, Employer Liability: $1,000,000; Automobile Liability: $1,000,000 combined single limit.
How proposals are evaluated
| Technical Approach and Understanding of Requirements | 30 |
| Healthcare and HIPAA Experience | 15 |
| References and Past Performance | 10 |
| Pricing and Overall Value | 10 |
Scope of work
- Service management and governance
- 24x7 network monitoring and management
- Firewall and network security management
- Workstation and endpoint management
- Patch management plan execution
- Microsoft 365 administration
- Remote help desk and onsite support
- 24x7 Security Operations Center
Minimum qualifications
- Onshore (USA Organization Only)
- Relevant healthcare, nonprofit, HIPAA, CJIS, managed IT, and cybersecurity experience
- Pass personnel screening and background requirements
- Completion of SafeSport training
- Completion of CJIS Privacy and Security Training
- Completion of HIPAA privacy and security training
Documents to include with the bid
- Cover letter with authorized signature
- Executive summary
- Company profile
- Transition and onboarding plan
- Attachment A Pricing Proposal Form
- Attachment B Reference Form
- Attachment C Subcontractor Information Form
- Attachment D Environment and Technical Approach Questionnaire
- Attachment J BAA Acknowledgment and Vendor Certifications
- Certificate or evidence of required insurance
Verify important details
Document checkConfirm submission instructions and amendments with the issuing agency before responding.
Personalized fit score
Sign up free to see how well this opportunity fits your company — based on your saved profile.
Sign up to see your fit score