EGB FY26 TBD FR 11645022

The State of Colorado’s Office of Information Technology (OIT) is seeking information from vendors for an Insider Threat Management Program. The program aims to detect and prevent insider threats, including user behavior and activity monitoring, expanded entity monitoring, and data protection and exfiltration prevention. Vendors are requested to provide information on their proposed solutions, including pricing models and market cost. The state is looking for a solution that can integrate with existing systems and provide real-time monitoring and alerts. • The solution should be able to establish "normal" activity baselines to detect anomalies. • The solution should be able to track employee work location and monitor "east-west" (internal) traffic. • The solution should be able to reconstruct activity timelines and capture desktop screenshots or recordings as irrefutable evidence of misconduct. • The solution should be able to assign dynamic risk scores to users based on activities. • The solution should be able to detect unusual work hours, login locations, or lack of engagement in standard collaborative activities.