The State of Maryland Government is seeking a Managed Security Services Provider (MSSP) to strengthen its cybersecurity operations, engineering capabilities, and enterprise risk management. The contract is for a base period of 2 years and two additional 2-year option periods. The MSSP will be responsible for providing a comprehensive cybersecurity program, including 24x7 SOC operations, dedicated cybersecurity staffing, and implementation of the program requirements. The proposal should include detailed information regarding the offeror's operational experience, implementation, integration, administration, monitoring, tuning, engineering, and support capabilities across the functional areas defined in the RFP. Some key areas of interest include Endpoint Detection and Response, Vulnerability Management, Web Application Scanning, and Security Information and Event Management.
• The proposal should clearly map personnel and roles to each required task.
• The SOC requirements should be fully met, including 24x7x365 operations, portal access, SLAs, threat detection, and incident response.
• The Analyst Team should be integrated into the delivery of the overall program.
• The proposal should disclose any proprietary technologies, integrations, data formats, or tooling dependencies that may limit interoperability or future migration.