Addendum No. 2 - Questions and Answers~2.pdf
PDF 294 KB Posted
- Solicitation number
- ARMC126-ARMC-6250
- Issued by
- San Bernardino County, California
About this file
This Addendum No. 2 document provides questions and answers for San Bernardino County's Arrowhead Regional Medical Center (ARMC) Comprehensive Cybersecurity Coverage - Sophos Products Renewal procurement (Bid No. ARMC126-ARMC-6250). The renewal procurement seeks Sophos licensing and support services including XG Firewall licenses, endpoint protection, server protection, and User Awareness Training capabilities. The contract term spans five years, commencing September 7, 2026, and concluding September 6, 2031. Services will be provided as an ongoing subscription and support model strictly, with no defined implementation phases. Deliverables include quarterly business review meetings and bi-yearly environment health checks, with ongoing technical support required. Rapid response and priority support are expected for severe technical cases, though specific Service Level Agreements are not mandated. The procurement does not accept proposals for equivalent solutions; only Sophos products are acceptable.
The estimated budget for this procurement is $1,500,000, with historical expenditures for similar Sophos licensing renewals totaling $1,260,659 under the current contract #24-400. Offshore participation and remote support from non-U.S. locations are not permitted under this contract. Personnel must be authorized to work in the jurisdiction where services are performed. The County requires vendor compliance with NIST cybersecurity compliance frameworks and SOC 2 certification. No specific periodic formal deliverables are required beyond the quarterly business review meetings and bi-yearly environment health checks. The procurement does not require periodic security posture reviews or risk assessments, nor does it mandate a specific reporting format.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Sophos Products Renewal RFP.pdf | ||
| Addendum No. 1 - Revision to Timeline.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
400 N. Pepper Avenue, Colton, California 92324-1819 | Phone: 909.580.1000
Addendum No. 2 Bid No. ARMC126-ARMC-6250
Comprehensive Cybersecurity Coverage – Sophos Products Renewal
No. Question Answer
1 Can you please provide the current existing contract number associated with the renewal?
The current contract is #24-400.
2 Is there an estimated total project budget, not-to-exceed amount, or funding ceiling established for this procurement?
The estimated budget for this project is $1,500,000.
3 Can the County provide historical contract value, prior award amount, or incumbent contract pricing information for similar Sophos licensing renewals?
Historically, ARMC has expended $1,260,659 for Sophos licensing.
4 Is offshore participation or remote support from non-U.S. locations permitted under this contract?
No. Offshore participation or remote support from non-U.S. locations is not permitted.
5 Are there any restrictions regarding remote access methods, VPN usage, IP address controls, geo-location limitations, or network access protocols applicable to Contractor personnel?
The platform is cloud-based.
6 Are there any residency, citizenship, or work authorization requirements applicable to key personnel assigned to this contract?
Personnel must be authorized to work in the jurisdiction in which they are assigned to perform Services.
7 Will the County require defined implementation or transition phases (e.g., onboarding, renewal coordination, reporting cycles), or will services be performed strictly as an ongoing subscription and support model?
Services will be performed strictly as an ongoing subscription and support model.
8 Are periodic formal deliverables required during the contract term (e.g., license utilization reports, phishing campaign performance metrics, user training completion reports, system health summaries)? If so, please specify required format and reporting frequency.
None, other than ongoing technical support, quarterly business review meetings and bi-yearly environment health checks.
Addendum # 1
9 Are defined Service Level Agreements (SLAs) required for technical support response times, issue resolution timelines, escalation procedures, or severity classifications?
Not specifically, however it is expected that rapid response and priority is given when severe cases require technical support.
10 Does the County require periodic security posture reviews, performance validation, or risk assessments during the contract term?
Not applicable to this item.
11 Is there a preferred or mandated reporting format (e.g., executive summary reports, technical detail reports, compliance documentation templates)?
No.
12 Are there any specific cybersecurity compliance frameworks (e.g., NIST standards, HIPAA Security Rule alignment, CJIS requirements, or other federal/state standards) that Contractor services must explicitly align with beyond general regulatory compliance?
Yes, NIST.
13 Are any specific vendor-level or personnel cybersecurity certifications preferred or required for this engagement?
Yes, SOC 2.
14 Will ARMC accept proposals for equivalent solutions to the listed Sophos products?
No.
File details come from the government source that posted it. Updated .