Emergency_FEMA_TC.pdf

This is an Emergency FEMA Technical Assistance document supporting the City of Pasadena's procurement for Managed Detection and Response (MDR) Services. The City seeks a vendor to establish a comprehensive 24x7x365 tenant-resident MDR service utilizing the City's Microsoft 365 environment, with full operational control of Security Operations Center (SOC) functions. The service scope includes Tier 1 endpoint detection, containment, and remediation for approximately 2,500 Microsoft 365 licensed users, with architecture designed for future expansion to identity, network, and infrastructure log integration. The proposal deadline is 2:00 pm on December 5, 2025. The initial contract term is three years with two optional one-year renewal periods. The project focuses on enabling internal teams to concentrate on higher-tier analysis and strategic initiatives while building a sustainable, co-managed environment with full documentation and portability of telemetry, rules, alerts, playbooks, and configurations within the City's tenant.

Evaluation criteria are weighted as follows: implementation approach (30%), detection and response capabilities (25%), experience and organizational qualifications (20%), cost (20%), and small business status (5%). Vendors must demonstrate public sector MDR experience, particularly with Microsoft 365 co-managed, tenant-resident implementations, and provide detailed information on five customer engagements including at least two public sector clients and two hybrid or cloud-native Microsoft 365 environments. The project is partially funded through the U.S. Department of Homeland Security's State and Local Cybersecurity Grant Program. Vendors must comply with federal and local requirements including lobbying disclosures, conflict of interest declarations, and maintain Cyber Liability insurance of $5,000,000 per occurrence. Additional Microsoft licensing requirements identified by the vendor will be procured separately through the City's existing Microsoft Enterprise Agreement and are not included in this solicitation. No specific budget range is disclosed in available documentation.