3-26-081P Cyber Security Managed Detection and Response Service.pdf

REQUEST FOR PROPOSAL

26-081P

MATANUSKA-SUSITNA BOROUGH

PURCHASING DIVISION

PALMER, ALASKA

PROPOSAL AND CONTRACT DOCUMENTS FOR

Cyber Security Managed Detection and Response Service

CLOSING DATE & TIME: Tuesday, December 2, 2025 @ 12:00 PM

TABLE OF CONTENTS

26-081P, CYBER SECURITY MANAGED DETECTION AND RESPONSE SERVICE

Advertisement

SECTION I

Instructions to Proposers

SECTION II

Scope of Service

SECTION III

Proposal Submission & Evaluation Criteria

SECTION IV

Submittal Page

SECTION V

Sample Agreement

SECTION VI

Attachments

SYNOPSIS

SOLICITATION SYNOPSIS

MATANUSKA-SUSITNA BOROUGH

REQUEST FOR PROPOSAL

Solicitation #: 26-081P Cyber Security Managed Detection and Response Service

Purpose of the Solicitation: The Matanuska-Susitna Borough is requesting proposals from qualified firms to supply a Managed Detection and Response Service (MDR) to Matanuska-Susitna Borough (MSB). See scope for detail.

Solicitation Schedule:

Solicitation Issued: Thursday, November 6, 2025

Deadline for Questions: Friday, November 21, 2025 by 5:00 PM

Closing Date & Time: Tuesday, December 2, 2025 by 12:00 PM

Bid documents are available to download for free from the Borough Purchasing Division’s website at https://www.matsugov.us/contractopportunities

Proposals must be received through the Bonfire (MSB Procurement Portal) prior to the time fixed for closing date & time to be considered. Time of receipt will be determined by the MSB Procurement Portal. Proposals received after the time and date for receipt of proposals are late proposals, will not be considered.

Persons needing accommodation in order to participate should contact the borough ADA coordinator at (907) 861- 8404.The Matanuska-Susitna Borough reserves the right to accept or reject any or all proposals, waive any and all technicalities or informalities it deems appropriate. Award of this project is subject to the availability of funding.

For more information call (907) 861-8601 or e-mail purchasing@matsugov.us.

https://www.matsugov.us/contractopportunities

SECTION I

INSTRUCTIONS TO PROPOSERS

INSTRUCTIONS TO PROPOSERS

01. EXAMINATION OF DOCUMENTS AND

SITE

Before submitting a proposal, the Proposer is encouraged to:

• Carefully examine and acquaint themselves with all portions of the proposal and specifications.

• Fully inform themselves of existing conditions and limitations.

• If material required for proposal purposes by these documents is absent, the Proposer is required to notify the Purchasing Officer.

• Any interested party submitting a proposal on Matanuska-Susitna Borough (MSB) projects should first review the MSB Debarment/Suspension List. This listing is available off of the MSB Purchasing Division web page. Any submission of a proposal, with participation or involvement of an individual, company, firm or corporation on this list will render the proposal as non-responsible.

02. INTERPRETATION

Should a Proposer find discrepancies in, or omissions from, the drawings or specifications, or be in doubt as to their meaning, they should at once notify the Purchasing Officer who will send written instructions or addenda to all known plan holders. The Purchasing Officer will not be responsible for oral interpretations. Questions must be received in writing. Questions received less than five (5) days before proposal close may not be answered. All addenda issued during the time of proposals shall become part of the Agreement Documents.

Questions or requests for clarifications shall be directed to the Borough’s Purchasing Officer.

Questions or requests for clarification directed to any other member of the Borough staff, or consultants may be grounds for rejection of proposal as being irregular.

E-mail questions to purchasing@matsugov.us or fax questions to the Purchasing Officer at (907) 861- 8617.

03. FORM OF PROPOSAL

Proposals should be submitted in accordance with the Section entitled Proposal Submission & Evaluation Criteria.

04. ALTERNATES

Alternate proposals, other than those called for in this solicitation, shall not be considered. The failure of a Proposer to propose upon all alternates called for may cause the rejection of the proposal as irregular.

05. SIGNATURE

The Proposer shall sign the original proposal in longhand, preferably in blue ink, eSignature is an acceptable alternate.

06. SUBMISSION OF PROPOSAL

All copies of the technical proposal, fee proposal, if any, and any other documents required to be submitted with the Proposal will only be accepted through the MSB Purchasing Procurement Portal (Bonfire) prior to the deadline for submission. The proposer shall assume full responsibility for timely submission.

Submissions received by mail, hand delivery, email, oral, or faxed will not be accepted and will not receive consideration.

Proposals received after the time and date for receipt of Proposals are late Proposals, will not be considered, and will be returned unopened.

While preparing your submission be sure to review section “X” entitled proposal submission & evaluation of the proposal. In addition, a checklist is provided on the Submittal Page as a courtesy to prospective Proposers. The checklist may not be all inclusive; it is the Proposer’s responsibility to make sure they comply with all requirements within the solicitation documents.

While submitting the requested documents through the MSB Purchasing Procurement Portal (Bonfire) please note the type and number of files allowed. The maximum upload file size is 1000 MB. Please do not embed any documents within your uploaded files, as they will not be accessible.

Upload your firm’s proposal submission at:

mailto:purchasing@msb.co.mat-su.ak.us https://matsugov.bonfirehub.com/portal.

Your submission must be uploaded, submitted, and finalized prior to the date & time specified in this document. We strongly recommend that you give yourself sufficient time and at least ONE day before closing time to begin the uploading process and to finalize your submission.

Important Notes: Proposal submissions will only be visible to the MSB after the due date & time.

Uploading large documents may take significant time, depending on the size of the file(s) and your Internet connection speed.

You will receive an email confirmation receipt with a unique confirmation number once you finalize your submission. Minimum system requirements: Internet Explorer 11, Microsoft Edge, Google Chrome, or Mozilla Firefox. Javascript must be enabled. Browser cookies must be enabled.

Need Help with submitting your proposal? Please contact Bonfire at Support@GoBonfire.com for technical questions related to your submission. You can also visit their help forum at https://bonfirehub.zendesk.com/hc.

If more than one Proposal is offered by any one party, by or in the name of their clerk. Partner, or other person, all such Proposals will be rejected. A party who has quoted prices to a Proposal der is not thereby disqualified from quoting prices to other Proposers, or from submitting a Bid directly for the work.

07. SUBMITTAL PAGE

The submittal page must be completed, signed and returned with the proposal. Proposers should acknowledge addenda, if any, on the submittal page.

The bottom of the submittal page contains a list of documents that should be included as a part of the proposal. Unless otherwise stated elsewhere in this solicitation, the submittal page and any required licensing is not counted toward any stipulated page limitation(s).

08. MODIFICATIONS

No oral or telephone modifications of any proposal submitted will be considered.

09. WITHDRAWAL OF PROPOSAL

Proposers may withdraw their proposal either personally or by written request at any time prior to the time set for the proposal closing. Need help withdrawing your proposal in Bonfire? Please contact Bonfire at Support@GoBonfire.com for technical questions related to your submission. You can also visit their help forum at https://bonfirehub.zendesk.com/hc.

No proposal may be withdrawn after the time set for the closing thereof. Proposals may be modified after proposal closing only as a result of negotiations.

10. EVIDENCE OF QUALIFICATIONS

Upon request of the Borough, a Proposer, whose proposal is under consideration for the award of the Agreement, shall submit promptly to the Borough satisfactory evidence of the Proposer’s financial resources, their experience, their performance in completing other projects of a similar nature and the organization and equipment they have available for the performance of the Agreement.

11. AWARD

Award Shall be made in accordance with MSB 3.08.300

12. BOROUGH’S RIGHT TO REJECT

PROPOSAL

The right is reserved to reject any or all proposals and to waive any informalities. Informalities that cannot be waived (MSB Code 3.08.250) are timeliness and manual signature requirements.

13. PROTEST OF AWARD OF PROPOSAL

Within two days of service of the Purchasing Officer’s determination of the apparent successful proposal, a proposer who wishes to protest the determination shall lodge a protest with the Purchasing Officer. The protest shall be in writing on a form provided by the Purchasing Officer. The protest shall describe with particularity the alleged errors in the award recommendation. The Purchasing Officer shall conduct a review and, within three working days of receipt of the protest, issue a determination. Full text of the protest and appeal procedures, as well as the protest form, can be downloaded from the Borough’s web site at www.matsugov.us, selecting “Services”, then selecting “Forms” under Forms and Documents, then selecting “Purchasing Forms”. A copy can also be obtained by contacting the Purchasing Division at

(907) 861-8601.

In order to receive notice of the apparent successful proposal, the proposer must provide the Borough with a fax number and an email. It is the http://www.co.mat-su.ak.us/ responsibility of the proposer to follow the selection process and stay apprised of the bid or proposal due date, the date notice of apparent successful proposer is issued and the period in which protests can be filed.

14. RESERVED

15. EXECUTION OF AGREEMENT

The Proposer whose proposal is accepted shall execute the Agreement and furnish the required insurance within five (5) working days after notice of Intent to Award is issued. The Agreement shall be considered executed by the successful Proposer when an authorized representative of the company or firm signs the Agreement and the insurance certificate(s) are received by the Purchasing Officer. Failure or neglect of the proposer to execute the Agreement within the time specified may result in the award of the Agreement to the next highest rated proposer.

The Borough will execute the Agreement within ten

(10) working days after execution by the Contractor as set forth above. The date the Agreement is executed by the Borough is the Agreement Date. The rights of the obligations provided for in the Agreement shall become effective and binding upon the parties of the Agreement Date.

16. QUALIFIED AND RESPONSIBLE

PROPOSER

The Borough reserves the right to require the Proposer to submit information pertaining to its products, service, reputation, or experience, in order to determine, at the Borough’s sole discretion, if the Proposer is qualified. Past dealings with the Borough and other government agencies will be considered in determining if the Proposer is responsible.

17. CONSULTANT’S VIOLATION OF TAX

OBLIGATIONS

A. No agreement shall be awarded to any individual, firm, corporation or business who is found to be delinquent in any area of taxation, lease or rental agreement with the Borough which has not been remedied within ten (10) calendar days of receipt of written notice.

B. This Agreement can be terminated for cause if it is determined that the individual, firm, corporation or business is in arrears of any taxation, lease or rental agreement that is due to the Borough that is not remedied within ten (10) calendar days of notification by regular mail.

C. The Borough reserves any right it may have to offset amounts owed by an individual, firm, corporation or business for delinquent Borough taxes against any amount owing to the same under a contract between the Borough and the same.

18. INSURANCE

See Insurance Requirements in Sample Agreement, Section 27.

19. FLOW DOWN PROVISIONS

This Agreement may include flow down provisions. This Agreement may be issued in connection with another government agency and may include flow down or contract provisions required by that agency. In the event of a conflict between the terms and conditions of the agreement and any flow down terms and conditions, the flow down terms and conditions shall govern. The Contractor and any sub-contractors agree to comply with any and all flow down or contract provisions required by the Borough or another government agency that are included in the Agreement. In the event that flow down or contract provisions required by other agencies or by law are inadvertently omitted from this Agreement, both parties agree to negotiate in good faith for inclusion of those provisions into the Agreement.

20. STATUTORY REQUIREMENTS

Proposers and proposed subcontractors shall be in compliance with the statutory requirements for Alaska licensing included in the certification statement in this RFP package. Non-compliance shall result in rejection of proposal.

21. ACCEPTANCE OF CONTRACT /

AGREEMENT TERMS AND CONDITIONS

By signing the Proposal Form/Proposal Submittal Form, the proposer certifies that they have examined and accept the terms and conditions of the Agreement contained in this solicitation. The acceptance is inclusive of, but not limited to, all

AGREEMENT REQUIREMENTS, TERMS AND

CONDITIONS, GENERAL PROVISIONS, AND

SUPPLEMENTAL CONDITIONS along with any and all conditions contained in the INSTRUCTIONS TO PROPOSERS associated with this solicitation.

Submission of a proposal in response to this solicitation certifies that the proposer is willing to accept these terms and understands that failure to accept these terms will subject the proposer to forfeiture of the contract/agreement and loss of any bid guarantee as liquidated damages.

Proposers are encouraged to carefully examine the insurance requirements, any bonding requirements, and any Defense and Indemnification clause contained in the sample contract/agreement.

22. MILEAGE AND PER DIEM

The Matanuska-Susitna Borough will not allow charges for mileage and/or per diem for projects deemed to be in the core area of Borough. The core area is defined as the area north of Knik River Bridge and south of Chickaloon Road on the Glenn Highway and all areas on Parks Highway south of the Willow Creek Bridge. Mileage and per diem outside the core area will be paid at the rates published by the State of Alaska, AAM 60 - Travel.

23. Minor Informalities/Negotiation The Borough expressly reserves the right to waive minor informalities, negotiate changes or reject any and all proposals and to not award the proposed contract, if in its best interest of the Borough. "Minor Informalities" means matters of form rather than substance which are evident from the submittal, or are insignificant matters that have a negligible effect on price, quantity, quality, delivery, or contractual conditions and can be waived or corrected without prejudice to other Offerors.

SECTION II

SCOPE OF SERVICES

SCOPE OF SERVICES

1 Statement of Work

1.1 Purpose

The purpose of this Request for Proposal (RFP) is to invite prospective vendors to submit a proposal to supply a Managed Detection and Response Service (MDR) to Matanuska-Susitna Borough (MSB). The RFP provides vendors with the relevant organizational, operational, service and performance, system, and architectural requirements of an MDR.

1.2 Coverage and Participation

The intended coverage of this RFP, and any agreement resulting from this solicitation, shall be for the use of all departments at MSB and any of its satellite offices. MSB reserves the right to add and/or delete elements or to change any element of the coverage and participation at any time without prior notification and without any liability or obligation of any kind or amount.

1.3 Period of Performance

The intended period of performance will be June 1, 2026, through June 30, 2029. The award of this contract will be contingent upon approval of the FY27 budget. A break-out of the cost per year will be required with an option to renew yearly after original contract. Contract will include a proof of concept of 30-90 days before June 1, 2026.

1.4 The MSB anticipates annual services for this contract to cost less than $175,000.

2 General Information

2.1 Original RFP Document

MSB shall retain the RFP and all related terms and conditions, exhibits, and other attachments, in original form in an archival copy.

2.2 The Enterprise

The Matanuska-Susitna Borough (MSB) is committed to strengthening its security posture to address today’s intricate and evolving cyber threat landscape. The requirements outlined in this document combine the Borough’s business and technical objectives, project scope, and desired features, including both functional specifications and workflow expectations, to ensure protection of MSB’s digital assets, sensitive data, and critical infrastructure.

The goals of the Managed Detection and Response Service include enhancing threat and vulnerability management capabilities, improving security device management with integrated monitoring, ensuring comprehensive auditing and compliance, and streamlining incident response processes. Additionally, the service should facilitate ongoing staff training and skill development. MSB wants to minimize the organization’s exposure to security risk and enhance its overall security posture. In addition, we want to improve the accuracy and reliability of security processes that also minimize errors and inconsistencies.

2.3 Proposal Variations:

Vendors are encouraged to submit multiple proposals if desired, to reflect different service tiers, scalability options, or pricing models. This flexibility will allow the Borough to evaluate solutions that best align with current and future needs. Vendors will be limited to two proposals.

2.4 Existing Technology Environment

The following is a listing of our current technology environment.

Microsoft Defender, Microsoft Purview, Firewall, Routers and Switches, Windows Servers and Desktops, Linux Servers and Desktops, Mac Devices, iOS Devices, Virtualization, Solar Winds (optional).

If the proposed solution includes or integrates with Microsoft Sentinel, vendors should note that the Matanuska-Susitna Borough will procure Sentinel licensing separately. Vendors should not include Sentinel licensing costs in their pricing proposals; however, the cost of that software will be factored into the vendor's total contract amount when evaluating proposals.

3 Scope of Work, Specifications, and Requirements

The service must be scalable across all MSB locations and infrastructure, supporting on-premise, cloud, co-managed, or hybrid architectures, with vendor recommendations on the best approach. It should provide monitoring of Outlook email environments with rapid detection and response to phishing, malware, and other suspicious activities, as well as integrate smoothly with existing MSB infrastructure while allowing for future growth. The service should include optional periodic penetration testing with reporting and remediation recommendations, comprehensive incident management covering containment, remediation, and root cause analysis, and robust training for Borough IT staff via the MSB’s training platform.

3.1 Service Management

1. SLA Management

• Describe the process by which formal SLA for managed security services is being established.

• Describe the process by which SLA is being monitored and evaluated.

• Describe the process by which SLA is being reviewed and improved.

2. Service Report

• Indicate the types of service reports that are provided.

• Describe the process by which service reports are being generated and submitted.

• Indicate the types of communication channels that are provided, such as onsite meeting and conference meeting.

3.2 Service Features

1. Capability of Real-Time Monitoring and Analysis

• Indicate whether your service supports real-time security event and log monitoring and analysis.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

2. Onsite Incident Response Support

• Indicate whether your service supports onsite incident response.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

3. Services Support Multiple Vendors’ Products

• Indicate whether your service supports multiple vendors’ products.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

4. In-Depth Technical and Security Request Support

• Indicate whether your service supports in-depth technical and security requests.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

5. Real-Time View Through Flexible Client Interface

• Indicate whether your service supports real-time view through flexible client interface.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

6. Dedicated Team per Client

• Indicate whether your service supports dedicated team per client.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

7. Support Compliance Audit and Assessment

• Indicate whether your service supports compliance audit and assessment.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

8. 24x7x365, Multiple, Redundant SOCs With Disaster Recovery and Global Coverage

• Indicate whether your organization has multiple, redundant SOCs with disaster recovery and global coverage.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

9. Global Online Community Providing Insight and Intelligence

• Indicate whether your organization has a global online community providing insight and intelligence.

• If the answer is “yes,” describe the process/factor by which the capability is provided.

3.3 Service Operations

1. Implementation and Configuration Proposals should provide a detailed service scope that clarifies all included features and capabilities, along with clear implementation timelines covering each phase from initial assessment to full operational deployment. They must outline transition plans for ongoing management by existing staff in cases where a dedicated IT security team is unavailable, and state any assumptions regarding feature gaps or limitations. The submission should also specify arrangements for ongoing support and maintenance.

Furthermore, proposals need to describe how the product integrates with Microsoft Defender endpoint, or if the service uses its own endpoint protection, how it avoids conflicts with the built-in Microsoft tools.

Additionally, there should be a comprehensive explanation of how the product works with Windows Defender Online logging from both workstations and servers.

• Describe the process by which functional security devices for your services are deployed. Include any tasks that must be performed on systems or devices already deployed (e.g. network configuration and third-party integration).

• Describe the process by which the security management device/appliance for your service is deployed.

Include any tasks that must be performed on systems or devices already deployed.

• Describe the process by which the security reporting device/appliance for your service is deployed.

Include any tasks that must be performed on systems or devices already deployed.

2. Ongoing Operations

• Describe the process by which the initial configuration of your service is performed. Include the implementation of any necessary security devices, the creation of any rules, and the configuration of any and all settings required for optimal operations.

• Describe the process by which the initial configuration of your service is updated and maintained.

Include the update of any necessary security devices, the update and/or modification of any rules, etc.

3. Auditing and Reporting

• Describe the logging capabilities for security devices. Address both onsite logging capabilities (within our organization’s perimeter) and offsite logging capabilities (within MDR’s perimeter). Indicate the type of data that can be captured as well as all protection and control mechanisms that are applied to the logs (including log encryption, log access restrictions, etc.).

• Describe the auditing and reporting capabilities for captured logs. Address whether standard report templates exist, whether they must be constructed, or whether the system supports ad hoc reporting only. Where standard templates exist, indicate what types of reports they represent and in all cases indicate what types of information can be presented in reports.

3.4 Service Support

Describe how you work with clients to deliver services.

1. Customer Support

• Do you provide toll-free customer support 24 hours a day, seven days a week? Please specify all paid support options.

2. Implementation Support

• Do you provide complete turnkey, onsite implementation and project management support? Please specify which support will be included and which is provided for an additional fee. Also specify whether support is available directly from the vendor or provided through a partner.

3.5 Questionnaire attachments

Fill out the attached questionnaires & submit with the proposal.

END OF SCOPE

SECTION III

PROPOSAL SUBMISSION & EVALUATION CRITERIA

PROPOSAL SUBMISSION & EVALUATION CRITERIA

PROPOSAL SUBMISSION:

1. Each proposer shall submit one clearly marked proposal, to include the signed “Submittal Page”, “Technical

Proposal” and “Fee Proposal” and any other documents requested in the RFP. Each requested document shall be its own document in adobe pdf format. Please do not embed any documents within your uploaded files, as they will not be accessible. See submission instructions in the instructions to proposers. Proposers should not include cover letters or resumes.

2. The proposals shall be organized in sections as indicated within the evaluation criteria below. The proposal should be limited to twenty (20) single-sided, single spaced pages in length. It is requested that a minimum font size of 10 be used wherever practical. The use of photos and graphics within the technical proposal page limit should be kept to a minimum. Photos and/or graphics can be used to demonstrate a process/method but should be limited to generic photos or tied to projects contained in the Relevant Experience section. Use of photos depicting specific projects not named in the Relevant Project Experience section may cause a proposal to be rejected.

3. The selected proposal shall be open for inspection after recommendation of award is issued. All scored proposals submitted shall be open for inspection upon execution of an agreement resulting from this solicitation.

Offerors should not include proprietary information in proposals if such information should not be disclosed to the public. Any language within a submittal purporting to render all or portions of a proposal confidential will be disregarded. Proprietary information which may be provided after selection for contract negotiations will be confidential if expressly agreed to by the Borough.

4. Evaluation Phase 1: Vendor Security Questionnaire response asks that vendors answer each question thoroughly and provide supporting documentation where requested. If a question does not apply, explain why.

Where possible, provide examples, recent reports, or evidence to support your responses. This will be a pass/fail evaluation. Failed vendors will be removed from consideration.

5. Evaluation Phase 2: Technical Proposal response shall be arranged in the following order: #1 Project

Understanding and Objectives, #2 Relevant Experience and References, #3 Technical Capability and Service Features, #4 Implementation, Transition, and Ongoing Service Management, #5 Organizational Capability and Key Personnel.

Maximum points equal 100. Up to five solutions from phase 2 will advance to phase 3.

6. Evaluation Phase 3: This evaluation phase will involve presentations of solutions selected from Phase 2. Each firm will present their vision, approach, and strategies for the project. The presentations will be evaluated based on the following criteria: #1 Software Fit and Functional Capability, #2 Implementation Readiness and Support, #3 Presentation Quality and Team Expertise.

Maximum points for Phase 3 equal 100.

Phase 3 Presentation Agenda:

#1 Welcome and Introductions (5 minutes), #2 Firm Presentation (30 minutes), #3 Q&A Session (15 minutes), #4 Firm Closing Remarks (5 minutes).

The Matanuska-Susitna Borough (MSB) will enter into negotiations with the highest-ranking firm from Phase 3.

PROPOSAL EVALUATION:

1. Award of this proposal shall be made in accordance with MSB 3.08.260 & 3.08.300.

PROPOSAL SUBMISSION & EVALUATION CRITERIA (CONTINUED)

PHASE 2: TECHNICAL PROPOSAL CRITERIA

1. Project Understanding and Objectives Weight: 20

Demonstrate understanding of the Borough’s security goals and the purpose of Managed Detection and Response services. Explain how the proposed MDR solution will enhance the Borough’s cybersecurity posture, mitigate threats, and align with MSB’s current and future IT infrastructure. Address any anticipated challenges or assumptions related to integration, monitoring coverage, and support for Microsoft Defender and other existing tools.

2. Relevant Experience and References Weight: 15

Vendors should provide examples of three comparable MDR or cybersecurity service implementations completed within the past five years for public sector and of similar size. Proposals should describe each project’s size, scope, and results achieved. Vendors should identify similarities to the Borough’s environment and provide three professional references, including contact information and relevant project descriptions.

3. Technical Capability and Service Features Weight: 30

Proposals should describe the core technical capabilities and differentiators of the MDR solution. Evaluation will consider the vendor’s ability to provide real-time detection and response for threats such as phishing, malware, and endpoint vulnerabilities, as well as integration with Microsoft Defender, Sentinel if applicable, and other MSB infrastructure. Proposals should demonstrate support for multi-vendor environments and hybrid (on-premise/cloud) architectures, along with redundancy and resiliency of SOC operations, including 24x7x365 coverage, disaster recovery, and geographic diversity. Vendors should explain how their solution supports audit readiness, log retention, and reporting requirements, and describe any optional or value-added features such as penetration testing, root cause analysis, or staff security awareness training.

4. Implementation, Transition, and Ongoing Service Management Weight: 25

Vendors should describe their complete approach for implementing, transitioning, and managing the MDR service.

Proposals should provide a detailed implementation plan including milestones, deliverables, and timelines, along with a proof-of-concept plan of 30–90 days. Vendors should address configuration, onboarding, and data migration processes, as well as training and knowledge transfer to Borough IT staff. The proposal should clearly outline service level agreements, escalation procedures, and incident response processes, including communication protocols and reporting frequency. Vendors should describe ongoing maintenance, monitoring, and service improvement practices and explain strategies to minimize operational disruption during both transition and steady-state operations.

5. Organizational Capability and Key Personnel Weight: 10

Vendors should provide an overview of their organizational capacity, stability, and personnel assigned to the Borough’s contract. Proposals should describe the qualifications and certifications of proposed personnel, including CISSP, CEH, SOC Analysts, or other relevant credentials, and detail their experience managing MDR or cybersecurity programs of similar scale and complexity. Vendors should demonstrate organizational maturity, financial stability, and years of MDR operation, including certifications or compliance frameworks such as ISO 27001, SOC 2, or FedRAMP. Proposals should describe the size and number of clients actively monitored, the management structure, quality assurance processes, communication approach, and any value-added services or innovations that enhance performance and reliability.

PROPOSAL SUBMISSION & EVALUATION CRITERIA (CONTINUED)

PHASE 3: DEMO/PRESENTATION CRITERIA

1. Software Fit and Functional Capability Weight: 50

Demonstration should show how the proposed software meets the Borough’s operational needs and supports required workflows. Evaluators will assess the system’s core functions, usability, interface design, configurability, and integration with existing Borough systems. Solutions should demonstrate adaptability to evolving business requirements and provide clear examples of how the software addresses the Borough’s needs.

2. Implementation Readiness and Support Weight: 30

Demonstration should communicate a clear and practical implementation plan, including timelines, training, data migration, and go-live support. Evaluators will consider the vendor’s ability to minimize operational disruption, provide ongoing maintenance, and offer responsive technical support after deployment.

3. Presentation Quality and Team Expertise Weight: 20

Evaluators will assess the clarity, organization, and professionalism of the presentation. This includes the vendor team’s ability to communicate technical concepts in understandable terms, respond effectively to questions, and demonstrate the expertise and coordination of the team in implementing and supporting the software solution.

SECTION IV

SUBMITTAL PAGE

SUBMITTAL PAGE

26-081P, Cyber Security Managed Detection and Response Service

By signing below, the Proposer hereby certifies to the following:

1. The individual signing below, or the firm associated or corporation of which they are a member, has not, either directly or indirectly, entered into any agreement, participated in any collusion, or otherwise taken any action in restraint of a free competitive process in connection with this solicitation.

2. The individual signed below is authorized by the firm association or corporation to bind such association or corporation to a legal contract.

3. The individual signing below, or the firm association or corporation of which they are a member, is not debarred or suspended from doing business with the Matanuska-Susitna Borough.

4. By signing the Proposal Form/Proposal Submittal Form, the proposer certifies that they have examined and accept the terms and conditions of the Agreement contained in this solicitation.

5. They are acknowledging receipt of the following Addenda Numbers (if no addenda have been issued, either leave blank or write “N/A” or “None”.

Company Name Date

Mailing Address Signature

City, State and Zip Code Printed (or typed) Name

Contact Person (printed or typed) Title (printed or typed)

Phone Number Email Address (optional)

Facsimile Number State and Professional License Numbers

It shall be the responsibility of the Proposer to that their proposal is received at or before the date and time fixed for closing.

Proposers should include the following with their proposal.

o Signed Submittal Page (acknowledging Addenda if applicable) o One signed Technical Proposal.

o System Requirements Questionnaire (Attachment 1) o Cybersecurity Questionnaire (Attachment 2) o Any other items required within the Instructions to Proposers &

Specifications/Scope of Services.

SECTION V

SAMPLE AGREEMENT

(List Addenda numbers that you are acknowledging receipt of)

IT SERVICES AGREEMENT

THIS AGREEMENT made and entered into this _______day of _________20__, by and between the MATANUSKA-SUSITNA BOROUGH and SELECTED CONSULTANT.

Section 01 Definitions

In this Agreement:

A. The term "Borough" means the Matanuska-Susitna Borough.

B. The term "Consultant" means Selected Consultant.

C. The term "Manager" means the manager of the Matanuska-Susitna Borough or his authorized representative.

Section 02 Employment of Consultant

The Borough hereby agrees to engage the Consultant and the Consultant hereby agrees to perform the services hereafter set forth.

Section 03 Scope of Services

The Consultant shall perform all the services provided for by this Agreement which are described with particularity in Exhibit "C", entitled Scope of Services, attached hereto and incorporated by reference as if fully set forth herein.

Section 04 Personnel

Personnel shall be limited to employees of Selected Consultant and it’s Sub-Consultants.

Section 05 Time of Performance

The services of the Consultant shall commence upon execution of this Agreement by both parties and shall be implemented by May 31, 2026. Services shall begin on June 1, 2026, through June 30, 2029. The contract is subject to annual appropriation of funds by the borough assembly. The period of performance may be extended for two additional one-year periods only by the mutual written agreement of the parties.

Section 06 Compensation

A. Subject to the provisions of this Agreement, the Borough shall pay the Consultant a total sum for all services and expenses for the term of this Agreement not exceeding the sum as set forth in Exhibit "B”, attached hereto and incorporated herein by reference, for services required by this Agreement.

B. Travel or per diem required for the performance of services pursuant to this Agreement shall be subject to

Exhibit "B”.

C. Except as otherwise provided in this Agreement, the Borough shall not provide any additional compensation, payment, use of facilities, service or other thing of value to the Consultant in connection with performance of Agreement duties. The parties understand and agree that, except as otherwise provided in this section, administrative overhead and other indirect or direct costs the Consultant may incur in the performance of its obligations under this Agreement have already been included in computation of the Consultant's fee and may not be charged to the Borough.

Section 07 Method and Time of Payment

A. The Borough will pay to the Consultant the amount set forth in Exhibit "B" which shall constitute the full and complete compensation for the Consultant's professional services. That sum will be paid on approval of billings submitted pursuant to a schedule set forth in Exhibit "B". If not identified within Schedule "B", normal billing cycle is 30 calendar days from receipt of an approved invoice. A billing is a summary of expenditures to date by line item categories (e.g., Personal Services, Travel, Contractual, Commodities and Equipment). Documentation of expenditures need not be submitted with billings but must be retained by the Consultant in the event the Borough requests said documentation.

B. No payment will be disbursed until the completed task and associated expenditures have been approved by the Borough.

C. All invoices must be submitted in duplicate and addressed as follows:

Matanuska-Susitna Borough Attention: Accounts Payable 350 East Dahlia Avenue Palmer, Alaska 99645

D. It is expressly understood and agreed that in no event shall the total compensation due the Consultant exceed INSERT DOLLAR AMOUNT IN WORDS ($00.00)

Section 08 Termination of Agreement for Cause

If, through any cause, the Consultant shall fail to fulfill in a timely and proper manner the obligations under this Agreement or if the Consultant shall violate any of the covenants, agreements, or stipulations of this Agreement, the Borough shall thereupon have the right to terminate this Agreement by giving written notice to the Consultant of such termination and specifying the effective date thereof, at least five (5) days before the effective date of such termination. All finished or unfinished documents, data, studies, surveys and reports or other material prepared by the Consultant under this Agreement are the property of the Borough and shall be delivered to the Borough by or upon the effective date of termination. The Consultant shall be entitled to receive compensation in accordance with the payment provisions of Exhibit "B" of this Agreement only for work completed to the Borough's satisfaction in accordance with Exhibit "C" of this Agreement and the other terms of this Agreement.

Section 09 Termination for Convenience of Borough

The Borough may terminate this contract at any time by giving written notice to the Consultant of such termination and specifying the effective date of such termination. All finished or unfinished documents and other materials as described in Section 8 above are the property of the Borough and shall be delivered to the Borough by or upon the effective date of execution of this section. The Consultant shall be entitled to receive compensation in accordance with the payment provisions of Exhibit "B" of this Agreement only for work completed to the Borough's satisfaction in accordance with Exhibit "C" of this Agreement and the other terms of this Agreement. If this Agreement is terminated due to the fault of the Consultant, Section 8 of this Agreement shall govern the rights and liabilities of the parties.

Section 10 Causes Beyond Control

In the event the Consultant is prevented by a cause or causes beyond control of the Consultant from performing any obligation of this Agreement, non-performance resulting from such cause or causes shall not be deemed to be a breach of this Agreement which will render the Consultant liable for damages or give rights to the cancellation of the Agreement for cause. However, if and when such cause or causes cease to prevent performance, the Consultant shall exercise all reasonable diligence to resume and complete performance of the obligation with the least possible delay. The phrase "cause or causes beyond control," as used in this section, means any one or more of the following causes which are not attributable to the fault or negligence of the Consultant and which prevent the performance of the Consultant: fire, explosions, acts of God, war, orders or law of duly constituted public authorities, and other major uncontrollable and unavoidable events, all of the foregoing which must actually prevent the Consultant from performing the terms of the Agreement as set forth herein. Events which are peculiar to the Consultant and would not prevent another Consultant from performing, including, but not limited to financial difficulties, are not causes beyond the control of the Consultant. The Borough will determine whether the event preventing the Consultant from performing is a cause beyond the Consultant's control.

Section 11 Modifications

A. The parties may mutually agree to modify the terms of the Agreement. Modifications to the Agreement shall be incorporated into the Agreement by written amendments.

B. It is expressly understood that the Borough may require changes in the scope of services and an unreasonable refusal by the Consultant to agree to modification in the scope of services will be the basis for termination of the Agreement for cause. It is expressly understood that the total amount of compensation for successful performance of the Agreement will not be modified, under any circumstances, without prior written approval of the Borough.

Section 12 Equal Employment Opportunity

A. The Consultant will not discriminate against any employee or applicant for employment because of race, color, religion, sex, national origin, physical handicap, age, status as a disabled veteran, or veteran of the Vietnam war era. The Consultant shall take affirmative action to ensure that applicants are employed and that employees are treated during employment without regard to their race, color, religion, sex, national origin, physical handicap, age, status as a disabled veteran, or veteran of the Vietnam war era. Such actions shall include, but not be limited to the following: employment, upgrading, demotions, or transfers;

recruitment or recruitment advertising; layoffs or terminations; rates of pay or other forms of compensation; selection for training, including apprenticeship; and participation in recreational and educational activities. The Consultant agrees to post in conspicuous places available for employees and applicants for employment, notices to be provided setting forth the provisions of this nondiscrimination clause.

B. The Consultant will, in all solicitations or advertisements for employees placed by or on behalf of the Consultant, state that all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, physical handicap, age, or status as a disabled veteran, or veteran of the Vietnam war era. The Consultant will cause the foregoing provisions to be inserted in all subcontracts for any work covered by this Agreement.

C. The Consultant shall keep such records and submit such reports concerning the equal opportunity employment provisions set forth in subsection 12 (A) for applicants for employment and employees as the Borough may require.

Section 13 Interest of Members of Borough and Others

No officer, member or employee of the Borough and no member of its governing body, and no other public official of the governing body shall participate in any decision relating to this Agreement which affects their personal interest or the interest of any corporation, partnership or association in which they are, directly or indirectly, interested or having any personal or pecuniary interest, direct or indirect, in this Agreement or the proceeds thereof.

Section 14 Assignability

Because of additional administrative and accounting time required of borough departments/divisions when third party financing agreement and/or assignments of payment are permitted, they will not be allowed under any agreement resulting from this Invitation to Bid.

Section 15 Interest of Consultant

The Consultant covenants, that it presently has no interest and shall not acquire any interest, direct or indirect, which would conflict in any manner or degree with the performance of services required to be performed under this Agreement. The Consultant further covenants that in the performance of this Agreement no person having any such interest shall be employed.

Section 16 Findings Confidential

To the extent permitted or required by law any reports, information, data, etc., given to or prepared or assembled by the Consultant under this Agreement which the Borough requests to be kept confidential shall not be made available to any individual or organization by the Consultant without the prior written approval of the Borough.

Section 17 Publication, Reproduction and Use of Materials

No material produced, in whole or in part, under this Agreement shall be subject to copyright in the United States or in any other country. The Borough shall have unrestricted authority to publish, disclose, distribute and otherwise use, in whole or in part, any reports, data or other materials prepared under this Agreement.

Section 18 Audits and Inspections

At any time during normal business hours and as often as the Borough or the Comptroller General of the United States may deem necessary, the consultant and any sub-consultants shall make available for examination all of its records with respect to all matters covered by this Agreement and will permit representatives of the Borough or the Comptroller General to audit, examine, and make excerpts or transcripts from such records, and to make audits of all contracts, invoices, materials, payrolls, records of personnel, conditions of employment, and other data relating to all matters covered by this Agreement.

Section 19 Jurisdiction; Choice of Law

Any civil action arising from this Agreement shall be brought in the superior court for the third judicial district of the state of Alaska at Palmer. The law of the state of Alaska shall govern the rights and obligations of the parties.

Section 20 Non-Waiver

The failure of the Borough at any time to enforce a provision of this Agreement shall in no way constitute a waiver of the provisions, nor in any way affect the validity of this Agreement or any part thereof, or the right of the Borough thereafter to enforce each and every protection hereof.

Section 21 Permits, Laws and Taxes

The Consultant shall acquire and maintain in good standing all permits, licenses and other entitlements necessary to the performance under this Agreement. All actions taken by the Consultant under this Agreement shall comply with all applicable statutes, ordinances, rules and regulations. The Consultant shall pay all taxes pertaining to its performance under this Agreement.

Section 22 Relationship of the Parties

The Consultant shall perform its obligations hereunder as an independent Consultant of the Borough. The Borough may administer this Agreement and monitor the Consultant's compliance with this Agreement but shall not supervise or otherwise direct the Consultant except to provide recommendations and to provide approvals pursuant to this Agreement.

Section 23 Agreement Administration

A. The Information Technology Director, or their designee, will be the representative of the Borough administering this Agreement.

B. The services to be furnished by the Consultant shall be administered, supervised, and directed by:

Consultant printed name Title

In the event that the individual named above or any of the individuals identified in the proposal to perform work under the Agreement is unable to serve for any reason, the Consultant shall appoint a successor in interest subject to a written approval of the Matanuska-Susitna Borough.

Section 24 Integration

A. This instrument and all appendices and amendments hereto embody the entire agreement of the parties.

There are no promises, terms, conditions or obligations other than those contained herein; and…