Description
The Executive Office of Technology Services and Security is seeking proposals from qualified vendors to provide Splunk licensing and associated professional services to support and maintain the Commonwealth’s existing Splunk environment, including Splunk Enterprise Security and related platform capabilities used for Security Operations. The selected vendor will provide Splunk licensing, technical support, and continuous data optimization services, and will work closely with the EOTSS Security Operations Center (SOC) and the Commonwealth’s Managed Security Services Provider (MSSP) to maintain the Splunk environment and support operational priorities. Key services include:
* Splunk Licensing: providing and managing the licensing required to support the Commonwealth’s Splunk environment
* Technical Support: providing technical support services to maintain the health, availability, and performance of the Splunk environment
* Data Optimization: providing ongoing data optimization services to improve the quality, relevance, and cost-effectiveness of data ingested into Splunk
* Collaborative Operational Support: working closely with the EOTSS SOC and MSSP to maintain the Splunk environment and support operational priorities
* Platform Maintenance and Improvement: supporting ongoing maintenance and continuous improvement of the Splunk environment
* Security Automation: supporting security automation capabilities to improve the efficiency, consistency, and repeatability of security operations processes
* Detection Engineering and Content Tuning: providing detection engineering and content tuning services to improve the effectiveness, accuracy, and operational value of the Commonwealth’s Splunk environment.
Some key features and requirements of the project include:
* The vendor must be a current ITS75 or ITS78 vendor to respond
* The vendor must provide a separate cost breakdown for both 1 year and 3-year terms for each of the services
* The vendor must provide options with respect to the following SKUs: Splunk Cloud with Enterprise Security Premier and Splunk Cloud with Enterprise Security Essentials
* The vendor must support ongoing maintenance and continuous improvement of the Splunk environment
* The vendor must provide documentation and knowledge transfer to EOTSS personnel and other authorized service providers.
Some benefits of the project include:
* Improved security and operational effectiveness
* Enhanced data quality and cost-effectiveness
* Increased efficiency and consistency of security operations processes
* Better support for operational priorities and maintenance of the Splunk environment.
The project has the following key milestones and timelines:
* RFQ posted: April 21, 2026
* Bidder questions due: April 27, 2026, 3:00 PM
* RFQ response due: May 6, 2026, 3:00 PM
* Notice of apparent successful bidder(s) posted: May 13, 2026 (estimated).
Some of the key stakeholders involved in the project include:
* The Executive Office of Technology Services and Security (EOTSS)
* The EOTSS Security Operations Center (SOC)
* The Commonwealth’s Managed Security Services Provider (MSSP)
* The vendor selected to provide Splunk licensing and professional services.