Attachment L9 - Service Category 9 Response.docx

Digital Security Solutions RFP No. 24-43230000-RFP Attachment L9 – Service Category 9: Mobile Security and Threat Detection

Respondent Name: Respondent Name Goes Here Solution Name: Solution Name Goes Here

Respondent Instructions:

· Respondents shall use this Attachment as provided to respond. Altering character count limits or any other restriction or control may result in a Respondent being found non-responsive.

· Names. Respondents must provide their name and the proposed Solution name in the spaces above.

· Section 1 Prompts. Section 1 of this attachment provides prompts. The Respondent shall provide a response to prompt 1 and should provide responses to prompts 2 through 10. Prompts are indicated by red text followed by a response block.

Prompt 1 has a maximum of 3000 characters. Prompts 2 through 10 have a maximum character limit of 500. Respondents who submit responses outside of the maximum character limit may be deemed non-responsive. Any additional files, links, or other information provided outside the response block will not be considered for evaluation.

Scores will be assigned by each individual evaluator in accordance with Attachment C, Evaluation Criteria. Prompt 1 is worth a total of 5 points. Prompts 2 through 10 are worth a maximum of 4 points total. An individual Evaluator’s score of the technical response for a proposed Solution will be calculated by the following:

Evaluator’s Prompt 1 score + (Sum of Evaluator’s Score for Prompts 2-10 / 9) = Evaluator’s Technical Response Score

· Section 2 Terms and Conditions. Section 2 of this attachment provides a space for the Respondent to include any Service Level Agreements (SLA) or additional terms and conditions that apply to the proposed Solution. Neither the SLAs nor any additional terms and conditions will be considered for evaluation.

· Definitions. Definitions contained in Attachment A, Statement of Work, are incorporated by reference.

Section 1. Prompts.

Prompt 1: Mobile Security Solutions must protect mobile devices (smartphones, tablets, and laptops) from unauthorized access, data leakage, and malware while maintaining compliance with security policies. The Solution should work across iOS, Android, and other mobile operating systems, integrating with Mobile Device Management (MDM) platforms to enforce security policies and track compliance.

Please describe how Respondent’s proposed Solution meets the above prompt in the field below.

Prompt 1 Response Goes Here

For the prompts below (indicated by red text followed by a response block), the Respondent should provide details on if and the Solution meets the identified technical capabilities and features.

Prompt 2: Mobile Threat Detection – Solution should include capabilities that monitor device behavior, app activity, and network connections for suspicious activities such as unauthorized data access, unapproved app installations, or malware downloads.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 2 Response Goes Here

Prompt 3: Mobile Application Management (IAM) – Solution should manage and secure the use of both enterprise and personal apps on mobile devices, including the ability to blacklist unsafe apps or restrict certain app permissions.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 3 Response Goes Here

Prompt 4: Device Encryption Enforcement – Solution should ensure that all data stored on the device is encrypted using industry-standard encryption algorithms (AES-256).

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 4 Response Goes Here

Prompt 5: Remote Wipe and Lock Capabilities – Solution should enable administrators to remotely erase data from lost or stolen devices to prevent unauthorized access.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 5 Response Goes Here

Prompt 6: VPN Enforcement – Solution should ensure that all mobile data traffic is securely transmitted through encrypted channels, even when using public Wi-Fi networks.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 6 Response Goes Here

Prompt 7: Behavioral Analytics – Solution should identify anomalous activities on mobile devices, such as attempts to bypass security controls or connect to unauthorized networks.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 7 Response Goes Here

Prompt 8: Integration of MDM Solutions – Solution should enforce policies for password strength, screen lock timers, device encryption, and software updates.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 8 Response Goes Here

Prompt 9: Geo-Fencing Capabilities – Solution should allow administrators to restrict device functionality or access based on geographic location.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 9 Response Goes Here

Prompt 10: Integration of CTI Data Feeds – Solution should detect mobile-specific malware, phishing campaigns, or command-and-control traffic targeting mobile devices, providing real-time intelligence to block such threats.

Please describe if and how Respondent’s proposed Solution meets this above prompt in the field below.

Prompt 10 Response Goes Here

Section 2. Service Level Agreement or Additional Terms and Conditions.

Respondent shall include any Service Level Agreements (SLAs) or additional terms and conditions that apply to the proposed Solution in the following text boxes. The text boxes below have a maximum character limit of 32,672 characters each. The information provided in the text boxes below will not be scored but will be incorporated into the final Term Contract documents as an exhibit.

Any Applicable SLA Goes Here Any applicable Addtional Terms and Conditons Goes Here