On-Call Information Technology Cyber Services

Project ID: 414127FC State|LocalOpportunities

Overview

Agency	San Diego County Regional Airport Authority [CA]
Deadline	03/23/26
Posted	02/20/26
Estimated Value	$5,000,000 - $15,000,000 (AI estimate)
Set Aside	Not Provided
NAICS	Not Provided
PSC	Not Provided
Location	California

Description

Primary Latest Change

Summary: The San Diego County Regional Airport Authority (Authority) seeks statement of qualifications ( SOQ ) from firms or individuals ( Respondent ) to provide on-call information technology cyber services ( Services ) at San Diego International Airport ( Airport ). Respondent is required to self-perform the requested services. These Services include but are not limited to data breach incident investigation and response; vulnerability assessments; penetration testing; critical controls assessment and compliance testing; business and operational risk assessment; documentation services; as well as network, systems, and application services. 1. Upon completion of the RFQ and interview process, the Authority would execute an Agreement with up to four (4) highest ranked Respondents ( Contractor(s) ), as determined by the Authority. 2. When the Authority has a requirement for service, the Authority will provide the Contractor(s) under this Agreement with a Scope of Work and, if required, perform a job walk. Upon completion, the Contractor(s) will submit their bid to include cost, which may be a lump sum or hourly rate, to the Authority. 3. The Contractor with the best overall bid, as determined by the Authority, will be awarded the project and issued a Task Authorization to self-perform the requested services. Projects will vary in size with a minimum project value of $1,000 and a maximum project value of $100,000.

Summary (Newest Update)

Background The San Diego County Regional Airport Authority (Authority) is seeking statements of qualifications (SOQ) from firms or individuals to provide on-call information technology cyber services at San Diego International Airport. The goal of this contract is to enhance the cybersecurity measures and response capabilities at the airport, ensuring the protection of sensitive data and compliance with relevant regulations. Work Details The services required under this contract include: 1. Data breach incident investigation and response. 2. Vulnerability assessments. 3. Penetration testing. 4. Critical controls assessment and compliance testing. 5. Business and operational risk assessment. 6. Documentation services related to cybersecurity protocols. 7. Network, systems, and application services aimed at improving overall cybersecurity posture. Period of Performance The anticipated agreement term is three (3) years, with an option for two (2) one-year extensions at the discretion of the President/CEO. Place of Performance Services will be performed at San Diego International Airport. Bidder Requirements Respondents must self-perform the requested services and demonstrate a minimum of five (5) years of experience in at least three of the specified service areas. They must also provide evidence of prior contracts with at least two airport-related clients and two public agency clients in the U.S., or describe three relevant projects completed in the past five years. Additionally, personnel assigned to perform services must have a minimum of five (5) years of experience in similar roles and possess relevant certifications such as CISSP, CASP, or GSEC for project leads, along with various GIAC or CompTIA certifications for technical staff.

Contacts