RFP - Managed Cybersecurity Services

Contract	RFP - Managed Cybersecurity Services
Status	Completed
Bids due	2025-04-07
Scope of work	PROJECT OVERVIEW Brunswick County is soliciting sealed proposals for Managed Cybersecurity Services. Cybersecurity Services will augment the County’s existing IT Cybersecurity Staff. These services will provide daily administration, monitoring, reporting, and support for managed Security Information & Event Management (SIEM), Security Operation Center (SOC), Managed Detection & Response (MDR), Vulnerability Scanning, and Patching solutions. We invite qualified vendors to submit detailed proposals by April 7, 2025, at 5:00PM ET. Download the complete RFP - Managed Security Services here Addendum 1 RFP: Managed CyberSecurity Services Questions/Answers (Non-Confidential) SCOPE OF WORK Brunswick County has established the following desired objectives for this project. Any changes to the specifications or Scope of Work will be made in the form of an Addendum to this Request for Proposals and will be supplied to all known prospective vendors and posted on the Brunswick County website. Notwithstanding the foregoing, vendors will be responsible for ensuring that they have all addenda. Brunswick County may negotiate and refine the final Scope of Work with the selected vendor. Brunswick County reserves the right to negotiate additional services with the selected vendor at any time after the initial contract award. Services must be priced separately as Brunswick County may select one or more services to award and implement in its sole and absolute discretion. Services The vendor will provide a proposal for the following services: SIEM Procure, provide, setup, support, tune, update, maintain, and fully manage a cloud-based Security Information & Event Management (SIEM) solution. SIEM solution shall include, without limitation: Cloud-based, fully outsourced, SIEM solution including rule writing, report generation, alert generation, and incident workflow. A properly sized SIEM solution to support 90 days of “hot” log data and 275 additional days of “cold” storage. Must include ability for customer export of log data for additional cold storage requirements. Centralized authentication (e.g., SAML) with multi-factor support, event collection, parsing, storage, and retention. Correlation rule development, maintenance, and tuning. Threat intelligence feed integration, ingestion, parsing and policy configurations. Investigation of alerts, configuration of incident workflows, notifications, and solution orchestration. Reporting & metrics development. Ability for installation of software on customer endpoints. Real-time monitoring and maintenance of system health and performance. Ability to ingest log data from nearly any security or Information Technology. Ability to provide User and Entity Behavior Analytics (UEBA) to identify, triage, and alert on privileged account abuse, privilege escalation, data exfiltration, anomalous behavior, and credential compromise. Ability to perform analytics using AI (artificial intelligence) and/or ML (machine learning) to identify a
Category	Information Technology
Posted	2025-03-05
Bid posting	Open

Part of the county's open data: download every contract (CSV).