Bid Specifications.pdf

Invitation to Bid:

Gratiot-Isabella RESD Managed Detection and Response Solution

September 26, 2024

Type of Bids Requested:

Sealed proposals for a Managed Detection and Response (MDR) Solution.

Time and Place:

Sealed proposal will be received until 2:00 PM, Eastern Daylight Savings Time on Friday, October 11, 2024, at the Main Lobby of the Gratiot-Isabella RESD Offices, 1131 E. Center St., Ithaca, MI 48847, at which time they will be publicly opened and read aloud. Late bids will be rejected.

Statement of Familial Relationship:

All bidders must provide disclosure in compliance with MCL 380.1267 and attach information to their bid. The bid shall be accompanied by a sworn and notarized statement disclosing any familiar relationships that exist between Owner or any employee of the bidder and any member of the School Board or Superintendent of the School District. The District shall not accept a bid that does not include the sworn and notarized disclosure statement.

Iran Economic Sanctions Act:

All bidders must provide certification that it is NOT an Iran linked business as defined by Michigan Public Act 517 of 2012. The bid shall be accompanied by a sworn and notarized statement providing such certification and attach the information to their bid. The District shall not accept a bid that does not include this certification.

Compliance with School Safety Initiative Legislation:

All bidders must provide certification that all persons that work directly or indirect for Bidder shall at all times comply with MCL 380.1230, 380.1230a, 380.1230c, 380.1230d, and 380.1230g, and have not been convicted of any “listed offenses”. The bid shall be accompanied by a sworn and notarized statement providing such certification and attach the information to their bid. The District shall not accept a bid that does not include this certification.

Rights Reserved by Owner:

The Board reserves the right to reject any or all proposals and to waive any irregularities in bidding, or to accept the lowest responsible proposal that in the opinion of the Board will serve the best interest of the Board. The Board will not be obligated to accept the lowest proposal. The Board further reserves the right to approve all subcontractors.

Withdrawal of Proposals:

No proposals may be withdrawn for a period of sixty (60) days after receipt of the proposals.

Project Location(s):

Gratiot Isabella RESD 1131 E. Center St.

Ithaca Mi 48847

Questions Should Be Directed To:

Joe Smith (989)875-5604 jsmith@giresd.net or

Shane Brooks (989)875-5641 sbrooks@giresd.net

Introduction:

Gratiot-Isabella RESD is seeking proposals from qualified vendors to provide a comprehensive Managed Detection and Response (MDR) solution. The selected vendor will deliver continuous monitoring, threat detection, incident response, threat intelligence, vulnerability management, and detailed reporting and analysis for 300 devices. The contract period will be from December 1, 2024, to November 30, 2026.

Scope of Work:

The MDR solution must include the following services:

1. 24/7 Monitoring:

o Continuous monitoring of our endpoints to detect potential threats.

2. Threat Detection:

o Utilizing advanced analytics, threat intelligence, and machine learning to identify suspicious activities and potential breaches.

3. Incident Response:

o A dedicated team of security experts who investigate and respond to incidents, mitigating threats and minimizing damage.

4. Threat Intelligence:

o Access to up-to-date threat intelligence to stay ahead of emerging threats.

5. Vulnerability Management:

o Regular scanning and assessment of our systems to identify and address vulnerabilities.

6. Reporting and Analysis:

o Detailed reports and insights into security incidents, helping us understand and improve our security posture.

Proposal Requirements:

Interested vendors must submit a proposal that includes the following:

1. Company Information:

o Company name, address, and contact information.

o Overview of the company, including years in business and experience with MDR solutions.

2. Service Description:

o Detailed description of the MDR services offered, including how each of the required services will be provided.

3. Pricing:

o Comprehensive pricing for the MDR solution, including any setup fees, monthly fees, and any other costs.

4. References:

o At least three references from clients who have used your MDR services.

5. Implementation Plan:

o A detailed plan for implementing the MDR solution, including timelines and key milestones.

6. Support and Maintenance:

o Description of support and maintenance services, including response times and escalation procedures.

Evaluation Criteria:

Proposals will be evaluated based on the following criteria:

1. Experience and Qualifications:

o Vendor’s experience and qualifications in providing MDR solutions.

2. Service Quality:

o The quality and comprehensiveness of the MDR services offered.

3. Cost:

o The total cost of the MDR solution.

4. References:

o Feedback from references.

5. Implementation Plan:

o The feasibility and thoroughness of the implementation plan.

Conclusion:

Gratiot-Isabella RESD looks forward to receiving your proposal and working with a vendor who can provide a robust and effective MDR solution to enhance our cybersecurity posture.

Affidavit of Bidder – Familial Relationships Form

The undersigned, the owner or authorized officer of (the “Bidder”), pursuant to the familial disclosure requirement provided in the Gratiot-Isabella RESD’s (the “District”) RFP, hereby represent and warrant, except as provided below, that no familial relationships exist between the Bidder or any employee of the above mentioned District, and any member of the Board of Education of the District or the Superintendent of the District.

List any Familial Relationships:

Bidder:

By:

Name:

Its:

STATE OF MICHIGAN

COUNTY OF

This instrument was acknowledged before me on the day of 2024, by

, Notary Public

County, My Commission Expires:

Acting in the County of:

Affidavit of Bidder – Compliance with School Safety Initiative Legislation certifies to the Gratiot-Isabella RESD’s (the “District”), that any and all persons who will work directly or indirectly for the Bidder, including, but not limited to, Bidder’s employees, agents, vendors, subcontractors or consultants, and who will work at or on any District property, shall at all times be in compliance with MCL 380.1230, 380.1230a, 380.1230c, 380.1230d, and 380.1230g and have not been convicted of any “listed offenses”.1 The Bidder further warrants and represents that all persons who will work directly or indirectly for the Bidder, including, but not limited to, Bidder’s employees, agents, vendors, subcontractors or consultants, and who will work at or on any District property, shall at all times be in compliance with MCL 380.1230, 380.1230a, 380.1230c, 380.1230d, and 380.1230g. Int this regard, Bidder agrees, without limitation, to report within three (3) business days to the District when any such person is charged with a crime listed in Section 1535a(1) of the Revised School Code2 or a substantially similar law, and to immediately report to the District if that person is subsequently convicted, pled guilty, or pled no contest to that crime.

This instrument was acknowledged before me on the day of 2024, by

, Notary Public

County, 1 The term listed offenses mean those defined in section 2 of the Sex Offenders Registration Act (SORA), MCL 28.722. 2 MCO 380.1535a(1)

Affidavit of Bidder – Iran Economic Sanctions Act (Michigan Public Act 517 of 2012) certifies, represents, and warrants to the Gratiot-Isabella RESD’s (the “District”), that that the Bidder (including it officers, directors, and employees) is not an “Iran linked business” within the meaning of the Iran Economic Sanctions Act, Michigan Public Act 517 of 2012 (the “Act”), and that in the event Bidder is awarded a contract as a result of the aforementioned RFP, the Bidder will not become an “Iran Linked Business”) at any time during the course of performing any services under the contact.

The Bidder further acknowledges that any person who is found to have submitted a false certification is responsible for a civil penalty of not more than $250,000 or two (2) times the amount of the contract or proposed contract for which the false certification was made, whichever is greater, the cost of the School District’s investigation, and reasonable attorney fees, in addition to the fine. Moreover, any person who submitted a false certification shall be ineligible to bid on a request for proposal for three

(3) years from the date that it is determined that the person has submitted the false certification.

This instrument was acknowledged before me on the day of 2024, by

, Notary Public

County,