The District is seeking a SAAS solution to enable IT staff to monitor the District's network security equipment and core servers to provide real-time analysis of perimeter and internal services. The selected contractor will provide a managed detection and response service for real-time threat intelligence and patterns threat of detection and response. The contract is for an initial three-year term with the option to renew for two one-year terms. The award amount is $387,528.96 plus applicable taxes. Key features of the selected solution include a scalable solution that monitors both corporate IT and OT environments, ability to integrate with the District's current enterprise security technologies, and a 24/7 manned Security Operations Center with direct access to threat analysts.
• The solution will include all necessary software, development services, installation services, configuration services, training, ongoing support services, and applicable hardware/appliance.
• The contractor will provide real-time analysis of perimeter and internal network services through aggregation and analysis of gathered information.
• The solution will be integrated with District cyber staff response activities to allow District staff to focus on recovery and resilience in the event of a cyber security incident.
• The contractor will apply their knowledge of external threats and of the types and numbers of threats detected to add value to the analysis of alerts and share such knowledge with staff.