Attachment L1 - Service Category 1 Response.docx

Digital Security Solutions RFP No. 24-43230000-RFP Attachment L1 – Service Category 1: Endpoint-Based Asset Discovery

Respondent Name: Respondent Name Goes Here Solution Name: Solution Name Goes Here

Respondent Instructions:

· Respondents shall use this Attachment as provided to respond. Altering character count limits or any other restriction or control may result in a Respondent being found non-responsive.

· Names. Respondents must provide their name and the proposed Solution name in the spaces above.

· Section 1 Prompts. Section 1 of this attachment provides prompts. The Respondent shall provide a response to prompt 1 and should provide responses to prompts 2 through 10. Prompts are indicated by red text followed by a response block.

Prompt 1 has a maximum of 3000 characters. Prompts 2 through 10 have a maximum character limit of 500. Respondents who submit responses outside of the maximum character limit may be deemed non-responsive. Any additional files, links, or other information provided outside the response block will not be considered for evaluation.

Scores will be assigned by each individual evaluator in accordance with Attachment C, Evaluation Criteria. Prompt 1 is worth a total of 5 points. Prompts 2 through 10 are worth a maximum of 4 points total. An individual Evaluator’s score of the technical response for a proposed Solution will be calculated by the following:

Evaluator’s Prompt 1 score + (Sum of the Evaluator’s Scores for Prompts 2-10 / 9) = Evaluator’s Technical Response Score

· Section 2 Terms and Conditions. Section 2 of this attachment provides a space for the Respondent to include any Service Level Agreements (SLA) or additional terms and conditions that apply to the proposed Solution. Neither the SLAs nor the additional terms and conditions will be considered for evaluation.

· Definitions. Definitions contained in Attachment A, Statement of Work, are incorporated by reference.

Section 1.

Prompt 1: An Endpoint-Based Asset Discovery Solution must continuously scan, detect, and inventory all endpoint devices, including, but not limited to, laptops, desktops, servers, and any other connected devices across the enterprise. The Solution must utilize lightweight agents that are deployed via endpoints, consuming minimal CPU and memory resources to avoid degrading performance or user experience.

Please describe how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 1 Response Goes Here

For the prompts below (indicated by red text followed by a response block), the Respondent should provide details on if and how the Solution meets the identified technical capabilities and features.

Prompt 2: Real-Time Asset Discovery –Solution should run continuously, detecting new devices as they connect to the network. This should include remote devices.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 2 Response Goes Here

Prompt 3: Detailed Hardware and Software Inventories – Solution should include inventory of processor types, memory, storage, installed software, patch levels, operating system versions, and device configurations.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 3 Response Goes Here

Prompt 4: Customizable Asset Classifications – Solution should allow administrators to tag devices by type, location, or business unit for easier management.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 4 Response Goes Here

Prompt 5: Agent Health Monitoring – Solution should ensure that agents are functioning correctly and can be managed or repaired from a central console, if necessary. The Solution should provide alerts if an agent becomes inactive or fails to report.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 5 Response Goes Here

Prompt 6: Centralized Management Console – Solution should provide a centralized management console that displays an up-to-date view of all discovered endpoints, including non-standard devices such as personal mobile devices or tablets.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 6 Response Goes Here

Prompt 7: Compliance Enforcement – Solution should provide alerts to where endpoints that fail to meet security requirements (e.g., outdated patches or unauthorized software) can be flagged for remediation.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 7 Response Goes Here

Prompt 8: Integration of CTI Data Feeds – Solution should provide real-time insights into endpoint vulnerabilities, ensuring that newly discovered devices are checked against the latest IoCs (Indicators of Compromise) and CVEs (Common Vulnerabilities and Exposures) behaviors targeting specific operating systems or device types.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 8 Response Goes Here

Prompt 9: Patching and Deployment Capability – Solutions should provide endpoint patch and deploy services which allows managing patch and deployment of operating system and application updates on systems utilizing the agent.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 9 Response Goes Here

Prompt 10: Metrics – Solution should provide the ability to roll-up patch and deployment level metrics across the domain.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 10 Response Goes Here Section 2. Service Level Agreement or Additional Terms and Conditions.

Respondent shall include any Service Level Agreements (SLAs) or additional terms and conditions that apply to the proposed Solution in the following text boxes. The text boxes below have a maximum character limit of 32,672 characters each. The information provided in the text boxes below will not be scored but will be incorporated into the final Term Contract documents as an exhibit.

Any Applicable SLA Goes Here Any applicable Addtional Terms and Conditons Goes Here