Description
The Department of State Hospitals (DSH) seeks a qualified vendor to provide a fully managed Splunk® Enterprise Security service for up to 100 service units. The contractor will perform 24×7 security monitoring, rule tuning, incident triage, dashboard creation, data‑source onboarding, threat‑intel integration, and system health administration, all delivered remotely. The contract is a one‑year term (renewable for a second year) with strict Service‑Level Objectives covering response times ranging from 30 minutes for critical alerts to 8 hours for low‑severity events. Vendors must comply with HIPAA, CCPA, NIST security standards, and must submit extensive certifications (small‑business, DVBE, HIPAA BAA, etc.).
• Core services: daily Splunk alert review, security rule tuning, incident escalation, custom dashboard/report development, and threat‑intel feeds.
• Mandatory compliance: HIPAA Business Associate Agreement, NIST 800‑63 MFA, AES‑128 encryption, breach‑notification within 24 hours.
• Financials: pricing entered by bidder in a DSH Cost Table; payment annually for licenses and monthly for hardware maintenance; total contract value not disclosed.
• Evaluation: lowest net‑cost quotation meeting all administrative requirements; small‑business and DVBE preferences available.