20242007_A2_Addendum 4.pdf
PDF 168 KB Posted
- Attached to
- RFI 20242007 Managed Security Operations Center and Managed Detection and Response Services
- Solicitation number
- S-KE0010-00008554
- Issued by
- Lane County, Oregon
About this file
This document is an addendum to RFI 20242007 for Managed Security Operations Center (MSOC) and Managed Detection and Response Services issued by the City of Eugene, Oregon. The RFI seeks information on solutions to provide 24/7 coverage for the City's environment, which includes approximately 3,500 endpoints running primarily Windows 10/11, iOS, and Linux. The City currently utilizes various security controls such as Checkpoint firewalls, Microsoft Defender, Azure WAF, and other tools. The RFI closes on December 7, 2023, and the City plans to evaluate responses based on completeness, proposed solutions, and vendor demonstrations.
The document also provides additional details on the City's current environment, including 11 domain controllers, 4 of which are in Azure, as well as a dozen public-facing web applications. The City is looking to move its Azure environment to the commercial cloud and does not currently use Microsoft Sentinel or third-party identity and access management solutions. The City's objectives for the new MSOC and MDR provider include 24/7 coverage, effective communication, and comprehensive coverage of the environment.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
RFI 20242007, Addendum 4 1
Date: December 1, 2023 To: All Potential Proposers From: Michelle Hahn, Purchasing Analyst Subject: Request for Information #20242007 Managed Security Operations Center and Managed
Detection and Response Services
ADDENDUM #4
The solicitation referenced above is updated & amended as follows:
1. Answer questions from potential bidders.
a. What are different types of Operating Systems running under the endpoints in scope for the bid?
Primarily Microsoft Windows 10, moving toward 11. Some instances of iOS and Linux.
b. How many endpoints fall under this RFI?
We want to plan on 3500 to cover everything in the environment currently and account for growth.
c. What controls do you currently have in your environment?
We utilize Checkpoint firewalls, Defender for endpoints, our Azure environment is behind a WAF, we utilize Microsoft MFA. We also have Microsoft ATA, Rapid 7 and Absolute Resilience.
d. Is FedRAMP a requirement for this bid?
FedRAMP is ideal but not a requirement.
e. Does Eugene currently use a SIEM? If so, which SIEM?
Rapid7
f. Are there any cloud-based servers/services that are within the scope of this bid?
We have an Azure environment within the GovCloud as well as Commercial Cloud.
Intent is to move to Commercial.
g. How many total Active Directory servers are in place?
We have 11 domain controllers, 4 of which are in Azure. This does not include DNS servers.
h. Does the City of Eugene run any public facing web applications?
Yes, there are a dozen or so web apps.
i. Are there any email security solutions in place on top of Defender for O365?
Nothing in addition to Microsoft’s offerings, including spam filtering and attachment scanning.
RFI 20242007, Addendum 4 2
j. Does the City of Eugene use Microsoft Sentinel?
Not currently
k. Does the City of Eugene use any third-party identity and Access Management solutions such as Okta or Duo?
Not currently
l. Please describe your top objectives for a new MOSC and MDR provider.
We are looking for a provider to offer coverage 24/7 primarily due to low staff numbers and high workloads. Communication is essential. Total coverage of the City of Eugene environment is crucial.
m. Please describe your evaluation criteria/weighting for proposed solutions.
This will be based on the RFI response, completeness of the answers to the RFI questions, scheduling a demo with chosen respondents, and what the respondents are proposing for a solution.
n. What type of Office 365 licenses does the City of Eugene currently have?
Majority of City staff (~75%): Microsoft G3 GCC + G5 Security GCC Staff who use computers infrequently (~25%): Microsoft F3 GCC + F5 Security GCC
o. SIEM Scoping Questions:
Data Sources Nodes or End Points or Users
Windows Domain Controllers 11
HyperVisor (ESXi, Hyper-V etc) 4 Hyper-V; 4 ESXi
Linux / Unix Servers 35
Network Flows (NetFlow/S-Flow) 52 nodes
Network IPS/IDS 2 firewalls
Network Load-Balancers 0
Network VPN / SSL VPN 5 point to point VPN; 1 SSL VPNs
Network Web Proxy 0
Network Wireless LAN 391 Access Points
Other Network Devices 0
Other Security Devices 0
RFI 20242007, Addendum 4 3
The last date to request solicitation clarification was November 27, 2023.
The solicitation closes December 7, 2023.
All other terms, conditions and specifications of this solicitation remain unchanged. Questions regarding this Addendum should be emailed to Michelle Hahn, MHahn@eugene-or.gov mailto:MHahn@eugene-or.gov
File details come from the government source that posted it. Updated .