addendum1-attachment9-vendorconferenceslides.pdf

Managed

Security Service

Provider (MSSP)

RFP 2025 - 067

Pre-Proposal

Vendor Conference

August 7, 2026

Introductions

NHDOT Primary Point of Contact

Nicholas King, TSMO Administrator

Nicholas.H.King@dot.nh.gov

NHDOT Secondary Point of Contact

Charles Blackman, P.E., TSMO Assistant Administrator

Charles.E.Blackman@dot.nh.gov

All correspondence shall include both Nick and Charlie

Consultant Support (VHB)

Matt Picanso, IMSA II

Dan Schandel, PE, PTOE, RSP1

Mark Suennen, PE, PTOE

8/7/2026 MSSP RFP DOIT 2026-067 2

Project Background

• All RFP Documents are available on the New Hampshire DAS Website:

apps.das.nh.gov/NHProcurement/Bid

• NHDOT is seeking Proposals from Qualified Vendors to provide managed security services and field service to support NHDOT’s TSMO Bureau and TMC operations.

• The MSSP Vendor will supplement the current New Hampshire Department of

Information Technology (NHDoIT) team assigned to the NHDOT Transportation

Systems Management and Operations (TSMO) Bureau by providing specialized cybersecurity services and field network support to ensure compliance with state and federal security requirements, maintain operational resilience, and protect critical ITS infrastructure and devices.

8/7/2026 MSSP RFP DOIT 2026-067 3

Purpose of the MSSP

• The TMC oversees more than 350 ITS devices statewide, including closed-circuit television

(CCTV) cameras, dynamic message signs

(DMS), radar sensors, as well as associated communications equipment. These systems are critical for real-time traffic monitoring, incident management and traveler information.

• The MSSP will monitor, manage, and protect the TSMO Bureau network infrastructure at the Transportation Management Center

(TMC) and in the field in alignment with relevant federal and state requirements.

8/7/2026 MSSP RFP DOIT 2026-067 5

Project Goals Support the following:

- 24/7 Monitoring and Incident Response: Provide continuous monitoring of the TSMO network

- Technical Expertise and Field Support: Supplement NHDOT and NHDoIT resources, including hands-on troubleshooting of field equipment and secure network configurations

- Standards Compliance: Compliance with applicable NIST cybersecurity frameworks, NHDOT, and NHDoIT cybersecurity policies, and federal transportation security policies and regulations

- Documentation and Reporting: Maintain traceable security controls and provide regular performance metrics, risk assessments, and audit-ready documentation

- ITS Integration and Support: Facilitate secure integration of existing and future ITS devices and services at the TMC

8/7/2026 MSSP RFP DOIT 2026-067 6

RFP Overview

Section 1 – Overview and Schedule of Events

• Executive Summary

• Scope of Work

• RFP Schedule (Schedule of Events)

Section 2 – Proposal Submission

• Technical Proposal: One (1) Original + Three (3) Physical copies + One copy of the

Proposal Transmittal Form + USB Drive

• Transmittal Letter – DOT Attachment 2

• Price Proposal: One (1) Original + Two (2) Physical copies + USB Drive

• Technical and Price Proposals shall be separate

• Requires Electronic Proposals as well (see Section 2.3)

• Vendor Inquiries – Addressed to Nick and Charlie with Subject Line:

• RFP DoIT # 2026-067 Managed Security Service Provider (MSSP) Inquiry

• RFI Form – DOT Attachment 3

8/7/2026 MSSP RFP DOIT 2026-067 7

Section 3 – Proposal Organization

• Technical Proposal – 7 Required Sections + Appendices

• See RFP Appendices B, C, and D for details on Sections III, IV, V, and VI

• Shall submit a completed Table B-2.1, B-2.2, and B-2.3 for Section III

• Shall submit a completed Table B-3 for Section III

• Shall address all Topics for Mandatory Responses for Section IV

• Price Proposal – 8th Section (Sealed Separately from Technical)

• See Appendix E for details on Section VIII

• Shall submit completed Tables E-1.1 and E-1.3 through E-1.7

• Shall submit completed Tables E-2.1 and E-2.2 (NHDOT informational only)

8/7/2026 MSSP RFP DOIT 2026-067 8

Section 4 - Proposal Evaluation

• 500 Point Scale – 350 Points Technical / 150 Points Price

• Will evaluate Proposal, Oral Interviews and Product Demonstrations

• A minimum score of 50 of 350 on the Technical is required before Price is opened

Section 5 – Terms and Conditions of RFP Process

• Any Addendums will be published to the NH DAS website

Section 6 – Contract Terms and Award

• Proposed 5-Year Contract with up to two 2-Year extensions

• Contract will follow State of New Hampshire General Provisions and Exhibits

(P-37 document is Appendix I, DOT Attachment 7)

8/7/2026 MSSP RFP DOIT 2026-067 9

Appendices

• Appendix A – This Vendor Conference

• Appendix B – Business and Technical Requirements

• DOT Attachment 1

• DOT Attachment 4

• Appendix C – Topics for Mandatory Responses (note page count limits)

• Appendix D – Vendor Qualifications

• Appendix E – Pricing

• DOT Attachment 6

• DOT Attachment 6.1 (supporting field services)

• Appendix F – DoIT Infrastructure and Security

• Appendix G – Not Applicable

• Appendix H – Terms and Definitions

• Appendix I – P-37 State Contract Template

• DOT Attachment 7

8/7/2026 MSSP RFP DOIT 2026-067 10

Requirements Overview

Table B-2.1 – Business Requirements Spreadsheet to be completed by Vendors

8/7/2026 MSSP RFP DOIT 2026-067 11

Criticality

• M = Mandatory – 100% shall be met by the Proposed Solution

• E = Expected – At least 80% should be met by the Proposed Solution

• O = Optional – See Appendix E-2 for discussion of pricing Optional Requirements

- Security Monitoring & Event

Management

- Threat Detection & Prevention

- Vulnerability Management

- Incident Response & Management

- Access Control & Identity Management

- Data Protection & Privacy

- Security Awareness & Training

- Performance Requirements

- Security Requirements

- Compliance Requirements

- Operational Requirements

- Integration Requirements

- Documentation & Deliverables

Requirements

- Project Management Requirements

- Field Operations Requirements

Requirements Overview

Table B-2.2 – Technical Requirements Spreadsheet to be completed by Vendors

8/7/2026 MSSP RFP DOIT 2026-067 12

Criticality

• M = Mandatory – 100% shall be met by the Proposed Solution

• E = Expected – At least 80% should be met by the Proposed Solution

• O = Optional – See Appendix E-2 for discussion of pricing Optional Requirements

- Prohibited Technologies

- Security Compliance Requirements

- StateRAMP Authorization

- Other Certification in lieu of StateRAMP

- Hosted Platform

- Information Technology Accessibility

Compliance

Table B-2.3 – Service Level Agreement (SLA) Spreadsheet to be completed by

Vendors

Selected Key Requirements

• B1.1: The Proposed Solution shall provide 24/7/365 continuous monitoring of NHDOT's network infrastructure, endpoints, applications, and critical transportation systems (e.g., traffic management systems, SCADA/ICS if applicable).

• B2.5: ITS-Specific Threat Detection: The Proposed Solution shall detect and alert on unauthorized access attempts to ITS field devices, attempts at signal manipulation, unauthorized firmware updates, and other attacks targeting ITS operational integrity.

• B3.1: The Proposed Solution shall conduct regular vulnerability scanning of NHDOT's network devices, servers, applications, and endpoints.

• B4.1: The Proposed Solution shall provide a defined incident response plan and procedures, tailored to NHDOT's environment and critical transportation systems, with specific playbooks for ITS-related incidents (e.g., traffic signal outages due to cyberattack, unauthorized access to camera feeds).

• B5.3: Field Personnel Access Monitoring: The Proposed Solution shall monitor and alert on suspicious or unauthorized access attempts by field maintenance personnel to ITS devices, both physical and logical.

8/7/2026 MSSP RFP DOIT 2026-067 13

Selected Key Requirements (continued)

• B6.3: ITS Operational Data Integrity: The Proposed Solution shall monitor and alert on suspicious modifications or corruption of ITS operational data that could impact transportation Proposed Solution functionality. The Proposed Solution shall conduct regular vulnerability scanning of NHDOT's network devices, servers, applications, and endpoints.

• B7.1: The Proposed Solution shall provide recommendations and support for NHDOT's security awareness training programs for all personnel, including specialized training for ITS operators and field technicians on cybersecurity best practices for operational technology and secure field maintenance procedures.

• B8.1: Alerting Latency: The Proposed Solution shall generate alerts for critical security incidents within five [5] minutes of detection.

• B8.5: Scalability: The Proposed Solution shall be scalable to accommodate NHDOT's future growth in network size, number of endpoints, and data volume, including expansion of ITS infrastructure.

8/7/2026 MSSP RFP DOIT 2026-067 14

• B9.6: ITS Device Hardening & Configuration: The Proposed Solution shall provide recommendations and support for implementing secure configuration baselines for

NHDOT's ITS field devices and central systems, including disabling unnecessary services and ports.

• B10.1: NIST Cybersecurity Framework: The MSSP solution shall align with the core functions of the NIST Cybersecurity Framework (Identify, Protect, Detect, Respond, Recover).

• B10.5: ITS Industry Standards: The Proposed Solution shall demonstrate familiarity with and ability to support NHDOT's adherence to relevant ITS industry standards related to cybersecurity (e.g., NTCIP security considerations).

• B11.2: The Proposed Solution shall establish clear communication channels and protocols with NHDOT IT and ITS operational personnel, including field maintenance teams.

• B11.4: The Proposed Solution shall provide immediate notification for critical security incidents, especially those impacting transportation system availability or safety.

8/7/2026 MSSP RFP DOIT 2026-067 15

• B12.1: ITS System Integration: The MSSP solution shall be capable of integrating with and monitoring NHDOT's specific ITS components and systems (e.g., traffic signal controllers, dynamic message signs, CCTV systems, vehicle detection systems, central traffic management software, and data analytics platforms). This includes the ability to ingest logs and telemetry from these diverse ITS devices and applications.

• B13.3: Incident Response Plan (IRP): The Proposed Solution shall submit a tailored IRP for

NHDOT, including roles, responsibilities, and procedures for various incident types, with specific sections addressing ITS operational impacts and recovery.

• B14.1: Systems Engineering Approach: The Proposed Solution shall demonstrate a clear understanding and application of the FHWA's systems engineering requirements under 23

CFR 940, the systems engineering 'V'-diagram and its associated processes throughout the project lifecycle, ensuring a structured approach to securing ITS.

• B15.1.1: Diagnostic Tools and Equipment: Field technicians shall be equipped with a comprehensive "Field Services Kit" containing consumable equipment and diagnostic tools.

This includes, but is not limited to: power supplies, patch cords, USB cables, CAT 6 cable, fuses, light kit (for fiber), and multimeters.

8/7/2026 MSSP RFP DOIT 2026-067 16

Selected Service Level Agreements

• SLA-4: All hardware and software components of the Vendor hosting infrastructure shall be fully supported by their respective manufacturers at all times. All critical patches for operating systems, databases, web services, etc., shall be applied immediately upon availability of the patch. Patches for high vulnerabilities shall be applied within fifteen (15) calendar days from vulnerability publication date. All other patches shall be applied within sixty (60) calendar days from vulnerability publication date. (RA-5)

• SLA-5: The State shall have unlimited access, via phone or email, to the Vendor technical support staff between the hours of 6:30am to 5:00pm- Monday through Friday ET.

• SLA-7: As part of the maintenance agreement, the Vendor shall commit to the timeline for critical networking and communication equipment issues and incidents for the several service levels in accordance with Supplemental Appendix B-2.3.1 Incident Response.

8/7/2026 MSSP RFP DOIT 2026-067 17

Selected SLAs (continued)

• SLA-13: The Vendor shall maintain a record of the activities related to repair or maintenance activities performed for the State and shall report quarterly on the following:

• Service up-time

• All change requests implemented, including operating system patches

• All Vulnerabilities reported including corrective action plan

• All Incidents reported including actual issue and resolution

• Number of incidents reported by level with initial response time, service time, and resolution time.

8/7/2026 MSSP RFP DOIT 2026-067 18

• SLA-16: For all maintenance Services calls, the Vendor shall ensure the following information will be collected and maintained:

• Nature of the Incident Response.

• Current Status of the Incident Response.

• Recommended Action plans, dates, and times.

• Expected and actual completion time.

• Incident resolution information.

• Resolved by.

• Identifying number i.e., work order number.

• Issue identified by.

• Development of After Action report.

8/7/2026 MSSP RFP DOIT 2026-067 19

• SLA-17: The Vendor must work with the State to identify and troubleshoot system failures, incidents and vulnerabilities by collecting the following information:

• Diagnosis of the root cause of the failure, incident, or vulnerability.

• Identification of repeat calls or repeat problems.

• Action item to minimize future repeats.

• SLA-20: The State may assign specific tasks as part of this Project. For example:

• The Vendor shall work with the State to support the TSMO Bureau’s transition from a

Layer 2 to a Layer 3 network.

• The Vendor shall support the integration of new traffic signal systems into the TSMO

Bureau’s network.

• The Vendor shall support the Department’s integration of connected vehicle infrastructure (V2I/V2X).

• Failure to complete tasks at the agreed upon milestones throughout the life of the

Project is subject to supplemental liquidated damages as described in SLA-18.

8/7/2026 MSSP RFP DOIT 2026-067 20

Schedule

8/7/2026 MSSP RFP DOIT 2026-067 21

Schedule of Events

Date & TimeEvent

July 13, 2026RFP Released to Vendors / Inquiry Period Begins

August 7, 2026, 10:00 AM ETMandatory Pre-Proposal Vendor Conference (TODAY)

August 18, 2026, 4:00 PM ETVendor Request for One-on-One Conference Deadline

September 8-10, 2026One-on-One Vendor Conferences

September 22, 2026, 4:00 PM ETVendor Inquiry Deadline (Final Inquiries due)

October 2, 2026State Reponses to Confidential Vendor Inquiries

October 13, 2026, 3:00 PM ETFinal Date and Time for Proposal Submission

November 2, 2026Invitations for Oral Presentations and Software Demonstrations

Week of November 30, 2026Vendor Presentations and Software Demonstrations (Optional)

December 18, 2026Estimated Date of Vendor Selection

April 21, 2027Anticipated Governor and Council Approval

April 26, 2027Anticipated Notice to Proceed

Questions or Comments

Contacts:

Nicholas King | NHDOT | Nicholas.H.King@dot.nh.gov | 603.731.5973

Charles Blackman, PE | NHDOT | Charles.E.Blackman@dot.nh.gov | 603.227.0016

8/7/2026 MSSP RFP DOIT 2026-067 22

Responses to any questions raised during this Vendor Conference and/or provided in writing on or before August 17, 2026 will be provided in writing on the NH DAS website by August 27, 2026.