24022 Addendum II RFP Managed Security Servic.pdf

PDF 42 KB Posted

Attached to
MANAGED SECURITY SERVICE
Solicitation number
PE-62960-NONST-2024-000000024
Issued by
Clayton County, Georgia

About this file

This document is an Addendum II issued by the Unified Government of Athens-Clarke County (ACCGov) related to RFP #24022 for Managed Security Service. The RFP deadline has been extended from January 11, 2024 to January 25, 2024. The addendum provides responses to questions regarding the existing network infrastructure, security tools, technical requirements, security incident response, patching schedules, and vendor responsibilities. ACCGov currently utilizes various security products including Sophos, Solarwinds, Cisco, Barracuda, and Veeam. The selected vendor will be expected to monitor and respond to security incidents, provide recommendations, and work with ACCGov's internal teams.

The addendum clarifies that offerors are permitted to submit multiple proposals, provided they meet all RFP requirements. ACCGov is open to recommendations on security software and programs as part of the managed security service, but the selected vendor must utilize Sophos or another product that meets the RFP's specifications. The managed security service will be the first line of defense, with the vendor providing assistance and support as needed.

View the file

Other files

File Type Posted
24022 Addendum I RFP Managed Security Service.pdf PDF
24022 RFP Managed Security Service.pdf PDF
24022 RFP Managed Security Service.xls XLS spreadsheet

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

ADDENDUM II

DATE: January 10, 2024

TO: ALL PROSPECTIVE OFFERORS

FROM: Toro Holt, Senior Buyer

RE: Addendum II, RFP #24022 MANAGED SECURITY SERVICE

The RFP deadline for receipt of proposals has been changed from: 3:00 P.M. ET, THURSDAY, JANUARY 11, 2024

TO: 3:00 PM, EST, THURSDAY, JANUARY 25, 2024

Pursuant to Scope of Services the following questions and answers are provided:

1. Could you provide more information about the existing network infrastructure and security tools in place?

We currently utilize Sophos Central, Solarwinds for monitoring and management, Cisco Umbrella, Cisco FTD Firewalls, Barracuda email security, Veeam For Data security and retention, Exagrid and wasabi for storage of backed up data. Please refer to Section III A in the RFP for Network Infrastructure.

2. Are there specific technical requirements or preferred technologies for the security operations center?

Please Refer to Section III E- Specific Task in the RFP

3. Can you provide more specific details or examples of the types of security incidents your ACCGov anticipates needing a response to?

Any and all that arise

4. Will the security team be provided with infrastructure for remediation of threats?

The managed security is the first line of defense I will be available for assistance and anything that may be physically needed to be done locally.

5. Is there a SIEM platform in use or planned to be used ?

We don’t have a SIEM, what ever additional tools needed or planned to be used should be included in proposal. We have no preferences it depends on what works best for the team that submitting the proposal.

6. Is there an EDR to use for analysts access?

We currently use Sophos

7. Do you plan to replace your end point detection?

Microsoft Defender is being analyzed and compared with Sophos to decide what works best for future implementation and our Security partner will be able to make recommendations when decision time comes.

8. What is the schedule for regular patching and can we provide suggestions regarding security patches for assets?

Patches are conducted weekly after hours.

9. What type of support is required?

Please Refer to Section III E- Specific Task in the RFP

10. How are the security incidents tracked currently?

Through the use of our XDR and Firewall applications

11. What are your internal security teams capabilities?

N/A

12. Is the selected vendor expected to take action upon threats?

Yes

13. A. Additionally, we are contemplating proposing two different solutions tailored to ACCGov's requirements.

B. However, we have observed a potential conflict between the statement in the RFP document and the response to Question 48 (provided below). Could you please clarify if submitting multiple solutions is permissible?

On pg 8. ALTERNATE PROPOSALS Alternate proposals or proposals that deviate from the requirements of this solicitation will not be considered. Offerors shall not insert in their proposal any written statement which will have the effect of making any material change or changes in the Scope of Services or in any contract between the parties covering subject matter thereof.

A. It is permissible to submit multiple proposals. The above statement doesn’t allow for changes to the scope of services or anything that recommends such a thing. The two separate proposals have to be a full-scale solution to the RFP and meet all requirements in order for them to be considered independently. The RFP is the Guide for what our Organization need and what we are looking for.

B. Clarity to Question 48 in original Addendum I

Do you need the MSSP to provide the endpoint security product or other protection software as part of the service or just to monitor existing products (co-managed)?

Original Answer: We are open to any an all proposals that will properly secure our network.

Clarification

We currently utilize Sophos. We are open to all suggestions on software and programs that Managed Security Provider recommends within their proposal. All recommendations and proposals must meet RFP requirements. Please Refer to Section III E- Specific Task in the RFP for all requirements the Managed security team must provide.

Questions and Answers are hereby added to and become a part of RFP #24022. This Addendum modifies and forms a part of the RFP Documents. All other terms and conditions remain unchanged.

Any inquiries concerning this RFP should be made to Toro Holt, Senior Buyer or Jonathan D. Carter, Security Analyst (706)-613-3075, fax (706)-425-4069 or email Jonathan.carter@accgov.com.

The Unified Government of Athens-Clarke County reserves the right to reject any and all proposals, to waive any technicalities or irregularities and to award the proposal based on the highest and best interest of the Unified Government of Athens-Clarke County.

mailto:Jonathan.carter@accgov.com

DATE: January 10, 2024
TO: ALL PROSPECTIVE OFFERORS

File details come from the government source that posted it. Updated .