addendum-2-rfp-dos-2026-06.pdf

This is an addendum to a Request for Proposal (RFP) issued by the State of New Hampshire Department of Safety, Division of Emergency Services and Communications, for NHICNet Managed Security Protection services (DOS-RFP-2026-06). The project seeks a Managed Detection and Response (MDR) provider to deliver comprehensive cybersecurity monitoring and incident response services for the state's critical public safety communications infrastructure, specifically the Motorola ASTRO Land Mobile Radio (LMR) network and NHICnet backbone. A mandatory vendor conference is scheduled for September 24, 2025, at 9:00 AM at the Division of Emergency Services and Communications in Concord, New Hampshire, with advance notification of attendee numbers required by September 19, 2025. The vendor inquiry period runs through October 7, 2025, with final state responses issued by October 10, 2025. Proposals are due by October 27, 2025, at 2:00 PM ET. Invitations for oral presentations will be issued on November 3, 2025, with vendor presentations scheduled for November 13, 2025 (noted as mandatory or optional). Vendor selection is estimated for November 21, 2025, with anticipated Governor and Council approval on January 14, 2026. The initial contract term will extend through February 1, 2031, with potential two-year renewal options.

The procurement is structured as a firm fixed-price agreement, with evaluation based on 100 total points: 60 points allocated to technical proposals and 31 points to pricing. The MDR solution must be U.S.-based with a U.S.-based Security Operations Center (SOC) and must comply with NIST and CJIS frameworks, providing capabilities including passive telemetry collection, threat detection, behavioral analytics, and configuration drift monitoring. The project will be executed in two phases, initially focusing on the Motorola Radio Network Infrastructure (RNI) before expanding to the NHICnet backbone. Optional features include endpoint detection for Motorola dispatch consoles and full visibility across network segmentation. The RFP does not specify set-asides for disadvantaged enterprises or identify an incumbent provider. Specific budget amounts and funding sources are not detailed in this addendum.