APPENDIX A.pdf

PDF 357 KB Posted

Attached to
UMGC RFP #92340 - Managed Security Operations Center (SOC) Services
Solicitation number
BPM059443
Issued by
Maryland

About this file

This file contains Appendices A-1 through A-5 and supporting documentation for University of Maryland Global Campus (UMGC) RFP #92340 for Managed Security Operations Center (SOC) Services. The solicitation seeks a qualified provider to deliver comprehensive 24x7x365 security monitoring, threat detection and analysis, incident response, threat intelligence, security reporting, and related advisory services. The technical proposal due date is November 16, 2026 at 10:00 AM ET. The Appendices establish mandatory qualification requirements, including current ISO/IEC 27001 certification or SOC 2 Type II attestation applicable to the proposed services, with offerors required to provide supporting documentation such as certificates, auditor attestation letters, or bridge letters during evaluation.

The documentation includes standard Maryland procurement affidavits and certifications that all offerors must complete and submit, covering representations regarding commercial nondiscrimination, minority business enterprise compliance, veteran-owned small business enterprise compliance, bribery convictions, other criminal convictions, debarment status, collusion, tax payment, conflict of interest, and conflict minerals disclosure. Offerors must also complete an Offeror Profile form detailing company information, years in business, SOC managed services experience, customer base, staffing, certifications, and contact information, along with providing three client references with contact details, project descriptions, dates of service, and descriptions of services rendered. The file does not contain pricing information, set-asides, incumbent contractor details, funding amounts, or contract term specifications.

View the file

Other files

File Type Posted
APPENDIX D - EFT.pdf PDF
UMGC RFP 92340.pdf PDF
APPENDIX C.pdf PDF
APPENDIX B Price Proposal Form.xlsx XLSX spreadsheet
APPENDIX S.pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

APPENDIX A-1

Offeror Qualification: Information Security Certification The Offeror must maintain either: (i) a current ISO/IEC 27001 certification issued by an accredited certification body or, (ii) a current SOC 2 Type II attestation applicable to the services proposed under this solicitation.

The Offeror must provide evidence of the certification or attestation, which may include a certificate, auditor attestation letter, bridge letter, or other documentation sufficient to demonstrate compliance. The University reserves the right to request additional support documentation during the evaluation process. Offerors are not required to submit their SOC 2 Type II report at this stage of the procurement but will be asked to provide before award.

Check all that apply:

☐ The Offeror maintains a current ISO/IEC 27001 certification issued by an accredited certification body.

☐ The Offeror maintains a current SOC 2 Type II attestation applicable to the services proposed under this solicitation.

☐ The Offeror does not maintain either of the above.

Documentation Provided:

☐ ISO/IEC 27001 Certificate

☐ SOC 2 Type II Attestation Letter

☐ Bridge Letter

☐ Other (describe): ______________________

APPENDIX A-2

ACKNOWLEDGEMENT OF RECEIPT OF ADDENDA FORM

RFP NO.:

TECHNICAL PROPOSAL DUE DATE:

RFP FOR:

NAME OF OFFEROR:

ACKNOWLEDGEMENT OF RECEIPT OF ADDENDA

The undersigned, hereby acknowledges the receipt of the following addenda:

Addendum No. dated

Addendum No. dated

Addendum No. dated

Addendum No. dated

Addendum No. dated

As stated in the RFP documents, this form is included in our Technical Proposal.

Signature

Printed Name

Title

APPENDIX A-3

BID/PROPOSAL AFFIDAVIT

A. AUTHORIZED REPRESENTATIVE

I HEREBY AFFIRM THAT:

I am the (print title) ____________________________________ and the duly authorized representative of (print business name) _____________________________________________ and that I possess the legal authority to make this Affidavit on behalf of myself and the business for which I am acting.

B. CERTIFICATION REGARDING COMMERCIAL NONDISCRIMINATION

The undersigned Bidder/Offeror hereby certifies and agrees that the following information is correct: In preparing its Bid/Proposal on this project, the Bidder/Offeror has considered all Bid/Proposals submitted from qualified, potential subcontractors and suppliers, and has not engaged in “discrimination” as defined in § 19-103 of the State Finance and Procurement Article of the Annotated Code of Maryland. “Discrimination” means any disadvantage, difference, distinction, or preference in the solicitation, selection, hiring, or commercial treatment of a vendor, subcontractor, or commercial customer on the basis of race, color, religion, ancestry, or national origin, sex, age, marital status, sexual orientation, sexual identity, genetic information or an individual’s refusal to submit to a genetic test or make available the results of a genetic test, disability, or any otherwise unlawful use of characteristics regarding the vendor’s, supplier’s, or commercial customer’s employees or owners. “Discrimination” also includes retaliating against any person or other entity for reporting any incident of “discrimination”. Without limiting any other provision of the solicitation on this project, it is understood that, if the certification is false, such false certification constitutes grounds for the State to reject the Bid/Proposal submitted by the Bidder/Offeror on this project, and terminate any contract awarded based on the Bid/Proposal. As part of its Bid/Proposal, the Bidder/Offeror herewith submits a list of all instances within the past four (4) years where there has been a final adjudicated determination in a legal or administrative proceeding in the State of Maryland that the Bidder/Offeror discriminated against subcontractors, vendors, suppliers, or commercial customers, and a description of the status or resolution of that determination, including any remedial action taken.

Bidder/Offeror agrees to comply in all respects with the State’s Commercial Nondiscrimination Policy as described under Title 19 of the State Finance and Procurement Article of the Annotated Code of Maryland.

B.1. CERTIFICATION REGARDING MINORITY BUSINESS ENTERPRISES (applicable if an MBE goal is set)

The undersigned bidder hereby certifies and agrees that it has fully complied with the State Minority Business Enterprise Law, State Finance and Procurement Article, §14-308(a)(2), Annotated Code of Maryland, which provides that, except as otherwise provided by law, a contractor may not identify a certified minority business enterprise in a bid or proposal and:

(1) Fail to request, receive, or otherwise obtain authorization from the certified minority business enterprise to identify the certified minority proposal;

(2) Fail to notify the certified minority business enterprise before execution of the contract of its inclusion in the bid or proposal;

(3) Fail to use the certified minority business enterprise in the performance of the contract; or

(4) Pay the certified minority business enterprise solely for the use of its name in the bid or proposal.

Without limiting any other provision of the solicitation on this project, it is understood that if the certification is false, such false certification constitutes grounds for the State to reject the bid submitted by the bidder on this project, and terminate any contract awarded based on the bid.

B.2. CERTIFICATION REGARDING VETERAN-OWNED SMALL BUSINESS

ENTERPRISES (if applicable to the solicitation)

The undersigned bidder hereby certifies and agrees that it has fully complied with the State veteran-owned small business enterprise law, State Finance and Procurement Article, §14-605, Annotated Code of Maryland, which provides that a person may not:

(1) Knowingly and with intent to defraud, fraudulently obtain, attempt to obtain, or aid another person in fraudulently obtaining or attempting to obtain public money, procurement contracts, or funds expended under a procurement contract to which the person is not entitled under this title;

(2) Knowingly and with intent to defraud, fraudulently represent participation of a veteran–owned small business enterprise in order to obtain or retain a bid preference or a procurement contract;

(3) Willfully and knowingly make or subscribe to any statement, declaration, or other document that is fraudulent or false as to any material matter, whether or not that falsity or fraud is committed with the knowledge or consent of the person authorized or required to present the declaration, statement, or document;

(4) Willfully and knowingly aid, assist in, procure, counsel, or advise the preparation or presentation of a declaration, statement, or other document that is fraudulent or false as to any material matter, regardless of whether that falsity or fraud is committed with the knowledge or consent of the person authorized or required to present the declaration, statement, or document;

(5) Willfully and knowingly fail to file any declaration or notice with the unit that is required by COMAR 21.11.12; or

(6) Establish, knowingly aid in the establishment of, or exercise control over a business found to have violated a provision of §B-2(1)—(5) of this regulation.

C. AFFIRMATION REGARDING BRIBERY CONVICTIONS

I FURTHER AFFIRM THAT: Neither I, nor to the best of my knowledge, information, and belief, the above business (as is defined in Section 16-101(b) of the State Finance and Procurement Article of the Annotated Code of Maryland), or any of its officers, directors, partners, or any of its employees directly involved in obtaining or performing contracts with public bodies (as is defined in Section 16-101(f) of the State Finance and Procurement Article of the Annotated Code of Maryland), has been convicted of, or has had probation before judgment imposed pursuant to Article 27, Section 641 of the Annotated Code of Maryland, or has pleaded nolo contendere to a charge of bribery, attempted bribery, or conspiracy to bribe in violation of Maryland law, or of the law of any other state or federal law, except as follows (indicate the reasons why the affirmation cannot be given and list any conviction, plea, or imposition of probation before judgment with the date, court, official or administrative body, the sentence or disposition, the name(s) of person(s) involved, and their current positions and responsibilities with the business):

D. AFFIRMATION REGARDING OTHER CONVICTIONS

I FURTHER AFFIRM THAT:

Neither I, nor to the best of my knowledge, information, and belief, the above business, or any of its officers, directors, partners, or any of its employees directly involved in obtaining or performing contracts with public bodies, has:

(1) Been convicted under state or federal statute of:

a. A criminal offense incident to obtaining or attempting to obtain, or performing a public or private contract; or,

b. Fraud, embezzlement, theft, forgery, falsification or destruction of records, or receiving stolen property;

(2) Been convicted of any criminal violation of a state or federal antitrust statute;

(3) Been convicted under the provisions of Title 18 of the United States Code for violation of the Racketeer Influenced and Corrupt Organizations Act, 18 U.S.C.

§1961, et seq., or the Mail Fraud Act, 18 U.S.C. §1341 et seq., for acts arising out of the submission of bids or proposals for a public or private contract;

(4) Been convicted of a violation of the State Minority Business Enterprise Law, § 14- 308 of the State Finance and Procurement Article of the Annotated Code of Maryland;

(5) Been convicted of a violation of §11-205.1 of the State Finance and Procurement

Article of the Annotated Code of Maryland;

(6) Been convicted of conspiracy to commit any act or omission that would constitute grounds for conviction or liability under any law or statute described in subsections

(1) – (5) above;

(7) Been found civilly liable under a state or federal antitrust statutes for acts or omissions in connection with the submission of bids or proposals for a public or private contract;

(8) Admitted in writing or under oath, during the course of an official investigation or other proceedings, acts or omissions that would constitute grounds for conviction or liability under any law or statute described above, except as follows (indicate reasons why the affirmations cannot be given, and list any conviction, plea, or imposition of probation before judgment with the date, court, official or administrative body, the sentence or disposition, the name(s) of the person(s) involved and their current positions and responsibilities with the business, and the status of any debarment):

E. AFFIRMATION REGARDING DEBARMENT

Neither I, nor to the best of my knowledge, information, and belief, the above business, or any of its officers, directors, partners, or any of its employees directly involved in obtaining or performing contracts with public bodies, has ever been suspended or debarred (including being issued a limited denial of participation) by any public entity, except as follows (list each debarment or suspension providing the dates of the suspension or debarment, the name of the public entity and the status of the proceedings, the name(s) of the person(s) involved and their current positions and responsibilities with the business, the grounds of the debarment or suspension, and the details of each person's involvement in any activity that formed the grounds of the debarment or suspension):

F. AFFIRMATION REGARDING DEBARMENT OF RELATED ENTITIES

(1) The business was not established, and it does not operate in a manner designed to evade the application of or defeat the purpose of debarment pursuant to Sections 16-101, et seq., of the State Finance and Procurement Article of the Annotated Code of Maryland; and,

(2) The business is not a successor, assignee, subsidiary, or affiliate of a suspended or debarred business, except as follows (you must indicate the reasons why the affirmations cannot be given without qualification):

G. SUBCONTRACT AFFIRMATION

Neither I, nor to the best of my knowledge, information, and belief, the above business, has knowingly entered into a contract with a public body under which a person debarred or suspended under Title 16 of the State Finance and Procurement Article of the Annotated code of Maryland will provide, directly or indirectly, supplies, services, architectural services, leases of real property, or construction.

H. AFFIRMATION REGARDING COLLUSION

Neither I, nor to the best of my knowledge, information, and belief, the above business, has:

(1) Agreed, conspired, connived, or colluded to produce a deceptive show of competition in the compilation of the accompanying bid or offer that is being submitted; or,

(2) In any manner, directly or indirectly, entered into any agreement of any kind to fix the bid price or price proposal of the bidder or Offeror or of any competitor, or otherwise taken any action in restraint of free competitive bidding in connection with the contract for which the accompanying bid or offer is submitted.

I. CERTIFICATION OF TAX PAYMENT

Except as validly contested, the business has paid, or has arranged for payment of, all taxes due the State of Maryland and has filed all required returns and reports with the Comptroller of the Treasury, State Department of Assessments and Taxation, and Department of Labor, Licensing, and Regulation, as applicable, and will have paid all withholding taxes due the State of Maryland prior to final settlement.

J. CONTINGENT FEES

The business has not employed or retained any person, partnership, corporation, or other entity, other than a bona fide employee or agent working for the business, to solicit or secure the Contract, and that the business has not paid or agreed to pay any person, partnership, corporation, or other entity, other than a bona fide employee or agent, any fee or any other consideration contingent on the making of the Contract.

K. CERTIFICATION REGARDING INVESTMENTS IN IRAN

The undersigned bidder or offeror certifies that, in accordance with State Finance & Procurement Article, §17-705, Annotated Code of Maryland:

(1) It is not identified on the list created by the Board of Public Works as a person engaging in investment activities in Iran as described in State Finance and Procurement Article, §17-702, Annotated Code of Maryland; and

(2) It is not engaging in investment activities in Iran as described in State Finance & Procurement Article, §17-702, Annotated Code of Maryland.

The undersigned bidder or offeror is unable to make the above certification regarding its investment activities in Iran due to the following activities:

L. CONFLICT MINERALS ORIGINATED IN THE DEMOCRATIC REPUBLIC OF CONGO

(FOR SUPPLIES AND SERVICES CONTRACTS)

The business has complied with the provisions of State Finance and Procurement Article, §14- 413, Annotated Code of Maryland governing proper disclosure of certain information regarding conflict minerals originating in the Democratic Republic of Congo or its neighboring countries as required by federal law.

M. CONFLICT OF INTEREST AFFIDAVIT AND DISCLOSURE

(1) "Conflict of interest" means that because of other activities or relationships with other persons, a person is unable or potentially unable to render impartial assistance or advice to the State, or the person's objectivity in performing the contract work is or might be otherwise impaired, or a person has an unfair competitive advantage.

(2) "Person" has the meaning stated in COMAR 21.01.02.01B(64) and includes a bidder, offeror, contractor, consultant, or subcontractor or subconsultant at any tier, and also includes an employee or agent of any of them if the employee or agent has or will have the authority to control or supervise all or a portion of the work for which a bid or offer is made.

(3) The bidder or offeror warrants that, except as disclosed in §D, below, there are no relevant facts or circumstances now giving rise or which could, in the future, give rise to a conflict of interest.

(4) The following facts or circumstances give rise or could in the future give rise to a conflict of interest (explain detail—attach additional sheets if necessary):

(5) The bidder or offeror agrees that if an actual or potential conflict of interest arises after the date of this affidavit, the bidder or offeror shall immediately make a full disclosure in writing to the procurement officer of all relevant facts and circumstances. This disclosure shall include a description of actions which the bidder or offeror has taken and proposes to take to avoid, mitigate, or neutralize the actual or potential conflict of interest. If the contract has been awarded and performance of the contract has begun, the contractor shall continue performance until notified by the procurement officer of any contrary action to be taken.

N. ACKNOWLEDGMENT

I ACKNOWLEDGE THAT this Affidavit is to be furnished to the Procurement Officer and may be distributed to units of: (1) the State of Maryland; (2) counties or other subdivisions of the State of Maryland; (3) other states; and (4) the federal government. I further acknowledge that this Affidavit is subject to applicable laws of the United States and the State of Maryland, both criminal and civil, and that nothing in this Affidavit or any contract resulting from submission of this Bid/Proposal shall be construed to supersede, amend, modify or waive, on behalf of the State of Maryland or any unit of the State of Maryland having jurisdiction, the exercise of any right or remedy conferred by the Constitution and the laws of Maryland in respect to any misrepresentation made or any violation of the obligations, terms and covenants undertaken by the above business in respect to (1) this Affidavit, (2) the contract, and (3) other Affidavits comprising part of the contract.

I DO SOLEMNLY DECLARE AND AFFIRM UNDER THE PENALTIES OF PERJURY THAT

THE CONTENTS OF THIS AFFIDAVIT ARE TRUE AND CORRECT TO THE BEST OF MY

KNOWLEDGE, INFORMATION, AND BELIEF.

By: ________________________________________________________ Signature of Authorized Representative and Affiant

Printed Name: ________________________________________________ Printed Name of Authorized Representative and Affiant

Title: ________________________________________________________ Title

Date: ________________________________________________________ Date

APPENDIX A-4

Offeror Profile Offeror Name:

State of Incorporation:

Type of Work Performed:

Number of Years in Business:

Number of Years Providing SOC Managed Services:

Number of Active SOC Customers:

Number of Dedicated SOC Subject Matter Experts Currently Employed by Your Company or Through Third- Party Contractors:

Average Customer Tenure:

Annual Retention Rate:

Number of Higher Education Customers:

Number of Government Customers:

Relevant Certifications applicable to this solicitation (e.g. ISO 27017 (Cloud Security); ISO 27018 (Cloud Privacy); CREST Accreditation; ISO 22301 (Business Continuity); ISO 27701).

Proposal Point of Contact Name, Email, and Phone:

Type of Company (e.g. Corp., Partnership, Individual, Joint Venture)

APPENDIX A-5

References Form

*NOTE: At its sole discretion, UMGC may, but is not required to, contact any references provided by the Offeror. UMGC also reserves the right to consider information obtained from any available reference source, including the Offeror’s past performance with UMGC, other University System of Maryland (USM) institutions, the State of Maryland, or other relevant sources, regardless of whether such sources were identified by the Offeror as references. Offerors should ensure that all reference contact information is current and accurate, and that designated contacts are knowledgeable and able to speak to the Offeror’s qualifications, capabilities, and performance.

Reference #1

Client Name

Point of Contact Name

Point of Contact Title

Point of Contact Email

Point of Contact Phone

Project Name

Dates of Service

Description of Services

Reference #2

Point of Contact Name

Point of Contact Title

Point of Contact Email

Reference #3

Point of Contact Name

Point of Contact Title

Point of Contact Email

Appendix A-3 Affidavit.pdf
Appendix a-3
BID/PROPOSAL AFFIDAVIT
1: Off
2: Off
3: Off
4: Off
5: Off
6: Off
7: Off
Text11:
NAME OF OFFEROR:
Addendum No:
dated:
Addendum No_2:
dated_2:
Addendum No_3:
dated_3:
Addendum No_4:
dated_4:
Addendum No_5:
dated_5:
Signature1_es_:signer:signature:
RFP No: 92340
Due Date: November 16, 2026 at 10:00AM ET
RFP Name: Security Operations Center (SOC) Services
Print title of Affiant:
Print name of Affiant Business:
Reasons why:
Debarments and suspensions:
Debarments and suspensions cont:
Explain detail:
By:
Printed Name:
Title:
Date:
Offeror Name:
State of Incorporation:
Type of Work Performed:
Number of Years in Business:
Number of Years Providing SOC Managed Services:
Number of Active SOC Customers:
Number of Dedicated SOC Subject Matter Experts Currently Employed by Your Company or Through Third Party Contractors:
Average Customer Tenure:
Annual Retention Rate:
Number of Higher Education Customers:
Number of Government Customers:
Relevant Certifications applicable to this solicitation eg ISO 27017 Cloud Security ISO 27018 Cloud Privacy CREST Accreditation ISO 22301 Business Continuity ISO 27701:
Proposal Point of Contact Name Email and Phone:
Type of Company eg Corp Partnership Individual Joint Venture:
Client Name:
Point of Contact Name:
Point of Contact Title:
Point of Contact Email:
Point of Contact Phone:
Project Name:
Dates of Service:
Description of Services:
Client Name_2:
Point of Contact Name_2:
Point of Contact Title_2:
Point of Contact Email_2:
Point of Contact Phone_2:
Project Name_2:
Dates of Service_2:
Description of Services_2:
Client Name_3:
Point of Contact Name_3:
Point of Contact Title_3:
Point of Contact Email_3:
Point of Contact Phone_3:
Project Name_3:
Dates of Service_3:
Description of Services_3:

File details come from the government source that posted it. Updated .