About this opportunity
AI summaryThe Sacramento Municipal Utility District requests proposals from onshore USA organizations for offsite cybersecurity master services under a non-exclusive Master Services Agreement. The required scope includes penetration testing, secure code reviews, social engineering testing, incident response, network security architecture reviews and implementation, risk assessments, and governance consulting. The contract duration is approximately five years, subject to annual budget approval by the Board of Directors. Interested vendors must attend a pre-proposal conference on November 12, 2026, and submit questions by December 11, 2026. Proposals are due through PlanetBids, with digital submission also available via email or online. SMUD will evaluate proposals based on mandatory pass/fail requirements, SEED program points, proposer experience and qualifications, category-specific experience, and commercial terms, requiring at least 41.25 points across the experience criteria to advance to commercial evaluation.
Buyer and opportunity details
- Client
- Sacramento Municipal Utility District
- Solicitation No.
- RITM0125944.BT
Scope of work
- Penetration testing and Red Team operations
- Secure code reviews
- Social engineering testing
- Incident response services
- Cybersecurity architecture and implementation
- Risk assessment
- Policy consulting and governance framework consultation
- Compliance work including PCI-DSS and CIP standards
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| MANDATORY REQUIREMENTS | Pass/Fail |
| SEED Program Evaluation Points | 10% |
| Proposer's Experience and Qualifications | 30% |
| Category Specific Experience | 25% |
| Commercial Terms (Price) and Compliance with SMUD's Contractual Terms | Not specified |
Minimum qualifications
- Minimum of five (5) or more years of experience providing services in the proposed Cybersecurity Services Categories
- All tasks must be performed by personnel located within the United States with no offshore resources
- Performed at least four (4) prior engagements with United States clients
- Firm must consist of at least 5 Full-Time Employees (not including 1099/contract-based workers)
- Must pass a mandatory SMUD Cybersecurity review
Documents to include with your response
- Proposal Agreement
- Safety Compliance Certificate
- Noncollusion Statement
- Public Record Indemnity Agreement
- Prompt Payment Program Form
- SEED Program Small Business Declaration
- Designation of Prime Contractor, Subcontractors and Suppliers Form
- Public Entity Contract Request
- Detailed Proposal
- Bid Schedule and Standard Rate Card
Key dates
- Pre-Proposal Conference
- Thursday November 12, 2026 10:30 A.M.
- Proposals due
- specified in the Bid Information section of this sourcing event in PlanetBids
How to submit
- Method
- Electronic via PlanetBids
- Instructions
- Proposals shall be submitted in PlanetBids, SMUD's sourcing system. Mailed or hand delivered responses will not be considered.
Contract details
- Term
- five (5) years, with the possibility of extending subject to mutual agreement
- Set-aside / preference
- Supplier Education & Economic Development (SEED) Program incentives applied (10 evaluation points and price advantage up to $250,000 for qualifying small businesses).
- Place of performance
- United States
- Insurance and bonding
- Within fifteen (15) calendar days after notice of award, the successful Proposer shall deliver to SMUD the required insurance certificates.