Attachment L5 - Revised Service Category 5 Response.docx

Digital Security Solutions RFP No. 24-43230000-RFP Revised Attachment L5 – Service Category 5: Email Security

Respondent Name: Respondent Name Goes Here Solution Name: Solution Name Goes Here

Respondent Instructions:

· Respondents shall use this Attachment as provided to respond. Altering character count limits or any other restriction or control may result in a Respondent being found non-responsive.

· Names. Respondents must provide their name and the proposed Solution name in the spaces above.

· Section 1 Prompts. Section 1 of this attachment provides prompts. The Respondent shall provide a response to prompt 1 and should provide responses to prompts 2 through 8. Prompts are indicated by red text followed by a response block.

Prompt 1 has a maximum of 3000 characters. Prompts 2 through 8 have a maximum character limit of 500. Respondents who submit responses outside of the maximum character limit may be deemed non-responsive. Any additional files, links, or other information provided outside the response block will not be considered for evaluation.

Scores will be assigned by each individual evaluator in accordance with Attachment C, Evaluation Criteria. Prompt 1 is worth a total of 5 points. Prompts 2 through 8 are worth a maximum of 4 points total. An individual Evaluator’s score of the technical response for a proposed Solution will be calculated by the following:

Evaluator’s Prompt 1 score + (Sum of the Evaluator’s Score for Prompts 2-8 / 7) = Evaluator’s Technical Response Score.

· Section 2 Terms and Conditions. Section 2 of this attachment provides a space for the Respondent to include any Service Level Agreements (SLA) or additional terms and conditions that apply to the proposed Solution. Neither the SLAs nor the additional terms and conditions will be considered for evaluation.

· Definitions. Definitions contained in Attachment A, Statement of Work, are incorporated by reference.

Section 1. Prompts.

Prompt 1: Email Security Solutions must protect against email-based threats such as phishing, malware, ransomware, and email compromises. The Solution should analyze both inbound and outbound email communications in real-time, using advanced detection techniques to filter malicious content without disrupting legitimate business correspondence.

Please describe how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 1 Response Goes Here

For the prompts below (indicated by red text followed by a response block), the Respondent should provide details on if and how the Solution meets the identified technical capabilities and features.

Prompt 2: Content Filtering – The Solution should break down files to their discrete components in real-time and reconstruct a clean version of the email, removing anything that doesn't conform with the file type specifications, a nationally recognized standard, or company policy.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 2 Response Goes Here

Prompt 3: Phishing Detection – Solution should analyze the email’s context, structure, and metadata (e.g., header information) to detect phishing attempts, which may include spear-phishing and targeted attacks.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 3 Response Goes Here

Prompt 4: Sandboxing Technology – Solution should have the capability to safely execute email attachments and embedded links in an isolated environment to determine if they are malicious before delivery to the recipient.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 4 Response Goes Here

Prompt 5: Advanced Anti Spoofing Protections – Solution should include enforcement of Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication, Reporting, and Conformance (DMARC) protocols to prevent sender impersonation.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 5 Response Goes Here

Prompt 6: Email Encryption – Solution should include encryption for sensitive communications, ensuring enforcement that messages are encrypted both in transit and at rest.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 6 Response Goes Here

Prompt 7: End-User Awareness Features – Solution should include automatic banners or warnings added to suspicious emails, helping users recognize potential threats.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 7 Response Goes Here

Prompt 8: Quarantine and Remediation Tools – Solution should provide quarantine and remediation tools for administrators, allowing them to review flagged messages, release legitimate emails mistakenly identified as threats, and block harmful content.

Please describe if and how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 8 Response Goes Here

Section 2. Service Level Agreement or Additional Terms and Conditions.

Respondent shall include any Service Level Agreements (SLAs) or additional terms and conditions that apply to the proposed Solution in the following text boxes. The text boxes below have a maximum character limit of 32,672 characters each. The information provided in the text boxes below will not be scored but will be incorporated into the final Term Contract documents as an exhibit.

Any Applicable SLA Goes Here Any applicable Addtional Terms and Conditons Goes Here