About this opportunity
AI summaryThe State of Rhode Island Office of the General Treasurer, in conjunction with the Employees' Retirement System of the State of Rhode Island, seeks cyber liability insurance. The policy must protect against financial loss, operational disruption, and reputational damage from incidents like unauthorized access, malware, ransomware, and data breaches. Required coverage includes first-party protection for incident response, forensic investigation, data restoration, system recovery, notification services, regulatory compliance, and crisis communications, with performance delivered offsite. Only onshore United States organizations are eligible to submit proposals. Respondents must email questions to [email protected] by November 27, 2026, at 4:00 PM EST. Final submissions require two electronic copies, one in PDF and one in MS Word, sent to the same email address by December 17, 2026, at 4:00 PM EST, accompanied by fee details submitted in a separate document. Evaluators will assess proposals using criteria that include relevant company experience, key personnel expertise, understanding of requirements, and cost factors.
Buyer and opportunity details
- Client
- Office of the General Treasurer in conjunction with Employees' Retirement System of the State of Rhode Island
Scope of work
- Cyber liability insurance coverage
- First-party coverage for incident response, forensic investigation, data restoration, and system recovery
- Notification services, regulatory compliance, and crisis communications
- Pre-incident risk management services
- Immediate technical incident response
- Post-breach financial, communication, and legal support
- Coverage tailored to sensitive member records, fiduciary obligations, and state-managed IT infrastructure
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| Clarity of Organizational Structure | 5 points |
| Alignment of Team Structure | 5 points |
| Relevant Company Experience | 5 points |
| Expertise of Key Personnel | 5 points |
| Longevity and Stability of the Company | 5 points |
| Understanding of Requirements | 20 points |
| Innovation or Value-Added Ideas | 20 points |
| Clarity of the Cost Breakdown | 10 points |
| Aggregate Cost | 25 points |
Minimum qualifications
- Aggregate Policy Limit of Liability: $10,000,000.00
- Ransomware and Cyber Extortion Limit: $10,000,000.00
- Data Recovery and Computer Replacement Costs: $10,000,000.00
- Direct Business Interruption for Security, Systems Failure: $10,000,000.00 and Voluntary Shutdown Interruptions: $10,000,000.00
- IT Provider Security or Systems Failure: $10,000,000.00 and Non-IT Provider Security or Systems Failure: $5,000,000.00
- Reputational Harm Loss: $10,000,000.00, Network Security and Privacy Liability: $10,000,000.00, Funds Transfer Liability: $10,000,000.00, Media Liability: $10,000,000.00
- Proof of Loss Preparation, Funds Transfer Fraud and Social Engineering, Service Fraud/Cryptojacking, and Impersonation Repair: $250,000.00 each
- Agreement includes pre-incident risk management, immediate technical incident response, and post-breach financial, communication and legal support
Documents to include with your response
- Respondent contact information
- Description of the firm/organization/company including background, experience, organizational history, and ownership structure
- Description of experience and qualifications in cyber liability insurance
- Identified assigned employees including contact information, qualifications, and relevant experience
- List of subcontractors, contractual relationships/affiliations, services provided, and monitoring procedures
- Three (3) references for similar services
- AI certification and human oversight verification
- Separate fee document with itemized costs for one (1), three (3), and five (5) year agreements
- One redacted copy clearly labeled (Respondent name) Non-Public Proposal if designating non-public records
Key dates
- RFP Issued
- 10-30-2026
- Deadline for Respondents to submit questions
- 11-27-2026 no later than 4:00 PM EST
- Response to questions due
- 12-4-2026
- Proposals Due
- December 17, 2026, by 4:00 PM EST
- Selection
- 1-15-2027
How to submit
- Method
- Instructions
- Submit two electronic copies (one PDF and one MS Word) to [email protected]; include one redacted copy if non-public records are designated.
Contract details
- Term
- term length of one (1), three (3) and five (5) years of coverage