7-QA 4.pdf
PDF 107 KB Posted
- Attached to
- 26-004 ERATE Email Security Solution_RFP
- Solicitation number
- 26-004 - ERATE Email Security Solution_RFP
- Issued by
- Bibb County, Georgia
About this file
This document is a Q&A document for RFP 26-004, an ERATE Email Security Solution for a school district seeking to upgrade their email security infrastructure. The project involves implementing a comprehensive email security platform for 31,000 user mailboxes (students and staff), with an estimated daily mail flow of 300,000 emails. The district is looking for a cloud-native solution that can integrate via API with Google Workspace or Microsoft 365, provide real-time remediation, and analyze historical email data without requiring email ingestion or archival systems.
The current email security environment utilizes Microsoft Defender, and the district has internally created security awareness training modules. They prefer a solution that can automatically handle threat remediation, with users managing their own quarantines. The district has no specific reporting requirements but indicates that more metrics are always better. They are seeking enhanced security and are open to an AI-driven, autonomous email security solution that allows IT staff full portal access to investigate and triage without direct human management. Compliance requirements are limited to standard state and federal regulations, and their existing ticketing system is IncidentIQ. The district does not require email archiving or continuity features and is willing to leave service level agreement specifics to vendor discretion.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 5-QA 2.pdf | ||
| 6-QA 3.pdf | ||
| 1-RFP 26-004 EmailSecuritySolution RFP July2025.pdf | ||
| 2-Bid Forms EMW.pdf | ||
| 3-Final Contract Procurement 2023 FINAL SampleFILE.pdf | ||
| 4-QA.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Q & A_4 26-004
ERATE Email Security Solution
Do you prefer a solution that can leverage API integration instead of journaling and/or rerouting the mail? Yes
Does you prefer a solution that can be deployed without interrupting or delaying email delivery? Yes
Does your preferred solution integrate directly via API with Google Workspace or Microsoft 365 without acting as a mail gateway? Yes
Is your preferred deployment model 100% cloud-native and out-of-band, with no in-line infrastructure or hardware appliances required? Yes
Does your preferred architecture preserve full visibility into internal, external, and partner email communications without relying on email journaling or connectors? Yes
Is your preferred solution capable of real-time remediation (e.g., message removal or rule rollback) via native API controls rather than MTA-level filtering? Yes
Does your preferred solution analyze historical email data immediately upon integration, without requiring email ingestion or archival systems? Yes
Can the District confirm whether all 31,000 user mailboxes (students and staff) will require full licensing under the email security platform, or will the scope be limited to staff mailboxes only for active monitoring, SOAR automation, and phishing remediation workflows? All
What is the estimated daily mail flow for the 31 K total users across the school system?
300,000
Regarding the point about the "Built-in SOAR", I want to confirm that it is not a requirement for there to be a human managed element to the email security tool. ls it ok if the proposed solution will action and re mediate emails autonomously using Al, and the IT team at the school will have full portal access to investigate and triage, but there will be no humans managing the email offering. Automation and AI is acceptable
Do you have any existing email security solutions in place? MS Defender
What are they, and what are the reasons you're looking to replace or supplement them?
Enhanced security
Do you have any security awareness training programs for your employees? Yes
What does that entail? Modules we created internally
How do you currently handle email quarantines? Built in M365 quarantines
Would you prefer your users to manage their own quarantine or have your IT staff handle it?
Users
Do you need features like email archiving or continuity in case of an outage? No
How do you want us to handle threat remediation? (e.g., automatically block and delete, or notify you for approval)? Automatically
What kind of reporting and metrics are important to you? (e.g., blocked threats, user clickrates on malicious links, Very Attacked People™ reports)? No specifics but more is always better
Do you have any existing Email Security licenses? MS Defender
What are your expectations regarding service level agreements (SLAs) for incident response and issue resolution? Vendor discretion
What ticketing system is in use today? IncidentIQ
Do you have any specific compliance requirements or regulations you need to meet? Just standard state or federal requirements
File details come from the government source that posted it. Updated .