REQUEST FOR PROPOSAL
CYBERSECURITY INCIDENT RESPONSE PLAN &
TABLE-TOP EXERCISES
Issue Date: Jan 5, 2026
Due Date: Jan 30, 2026 - 5PM PDT
SUBMITTALS:
One (1) electronic format copy emailed to
RFPIR@puyallupwa.gov
CITY OF PUYALLUP
Attn: IT Dept.
333 S Meridian, Fl 4
Puyallup, WA 98371
City of Puyallup – Cybersecurity Incident Response Plan & Table-Top Exercises - Request for Proposal
Page | 1
TABLE OF CONTENTS
SECTION 1: OVERVIEW
1.1
BACKGROUND….………………………………….…….3
SECTION 2: SUBMISSION OF PROPOSAL
2.1
SUBMISSION REQUIREMENTS….……….……..3
2.2
ANTICIPATED RFP SCHEDULE.………….………4
2.3
CONTACT.………………………………………….……….5
SECTION 3: STATEMENT OF PROJECT……………………………….…….6
SECTION 4: EVALUATION CRITERIA AND EXPLANATION………..7
4.1
CRITERIA EXPLANATION…………………………….7
SECTION 5: EVALUATION AND SELECTION………………………………9
SECTION 6: GENERAL TERMS, CONDITIONS, AND CRITERIA….9
City of Puyallup – Cybersecurity Incident Response Plan & Table-Top Exercises - Request for Proposal
Page | 2
SECTION 1: OVERVIEW
1.1 BACKGROUND
The City of Puyallup’s Emergency Management Department currently has a
Continuity of Operations (COOP) Plan and an Incident Response (IR) Plan. We are
seeking proposals from qualified vendors to review the existing COOP and IR
plans and to develop new, aligned cybersecurity-focused incident response
deliverables, including:
1. A Cybersecurity Incident Response (IR) plan for up to 7 common
incident types &
2. Conduct Table-Top Exercises to address the selected incident scenarios
using the newly developed IR Plan and create playbooks.
The City of Puyallup is the third-largest city in Pierce County, WA with a 2024
population of 43,410 combined with staff of approximately 325 employees. The
City provides a wide variety of services to City residents including public works,
permitting, police, library, recreation center, senior activity center and
emergency management services. The City also provides water and wastewater
services to its citizens.
Proposers responding to this Request for Proposal (RFP) must have proven
expertise and extensive experience providing Incident Response Planning
services to government agencies of similar size.
SECTION 2: SUBMISSION OF PROPOSAL
2.1 SUBMISSION REQUIREMENTS
RFP packets are available on the City of Puyallup website at:
https://www.cityofpuyallup.org/bids
• Direct questions for clarification to the email address below by Jan 16, 2026.
• Interested proposers also must provide one (1) electronic copy of their
proposal.
a. Email: RFPIR@puyallupwa.gov
b. Subject Line: RFP Submission – IR Plan & TTE
• Responses to questions will be emailed on Jan 23, 2026 (to all proposers
who have expressed interest in the RFP at the above email address).
• All proposals must be received no later than 5:00 pm PST on Friday
January 30, 2026.
• Submittals should be addressed and submitted to the following address:
City of Puyallup – Cybersecurity Incident Response Plan & Table-Top Exercises - Request for Proposal
Page | 3
City of Puyallup
ATTN: IT Dept.
333 S. Meridian, Fl 4,
Puyallup, WA 98371
2.2 ANTICIPATED RFP SCHEDULE
The City anticipates the following general timeline, subject to change, for
receiving and evaluating the proposals and selecting a vendor for the Incident
Response Plan & Table-Top Exercises:
RFP process
Deadlines
RFP Advertisement
January 5, 2026
Questions & Requests for Clarifications
Due: by 5:00PM PST
January 16, 2026
Addendum Issued
January 23, 2026
Proposal Due by 5PM PST:
Consultant Interviews, if held:
January 30, 2026
February 23, 2026
Commence Contract
March 16, 2026
Proposers are responsible for reading and understanding all portions of the
solicitation documents, and to include all requirements in their proposals.
Proposals must be submitted in the required form and contain all required
documents and responses, be signed by the proposer or its authorized
representative, and submitted in the manner and number described in the
Request for Proposals. The Proposal will be evaluated on the completeness and
quality of content.
The City of Puyallup reserves the right to:
• Cancel the procurement or reject any or all proposals.
• Not award a contract for the requested services.
• Waive any irregularities or informalities.
• Accept the proposal which the City deems to be the most beneficial to the
public and the City.
City of Puyallup – Cybersecurity Incident Response Plan & Table-Top Exercises - Request for Proposal
Page | 4
• Negotiate with any proposer to further amend, modify, redefine, or
delineate its proposal.
• Negotiate and accept, without re-advertising, the proposal of the next-
highest scored proposer, if a contract cannot be successfully negotiated
with the selected proposer, which may occur prior to the time of notice of
intent to award.
• Further question any proposer to substantiate claims of experience,
background knowledge, and ability.
It is understood that all statements will become part of the public file on this
matter, without obligation to City of Puyallup. The City of Puyallup is not liable for
any cost incurred by proposers in the preparation or presentation of their
proposal. Proposals and quoted costs shall remain valid for at least 120 days
after submission.
2.3 CONTACT
Direct questions for clarification on Request for Proposal to:
Amit Makharia, IT Director
RFPIR@puyallupwa.gov
City of Puyallup – Cybersecurity Incident Response Plan & Table-Top Exercises - Request for Proposal
Page | 5
This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.
