FY27 Alton - Scope - BAS Generator IT Security Service B53022.docx
DOCX document 31 KB Posted
- Attached to
- DBHR AMHC SP Building Automation System (BAS)
- Solicitation number
- 27-444DHS-MENTH-B-53022
- Issued by
- Madison County, Illinois
About this file
Summary
This is a Scope of Work document for the Alton Mental Health Center, operated by the Illinois Department of Human Services, soliciting IT-side support services for its Building Automation System (BAS) and generator. The procurement, identified as Requisition #27-444DHS-MENTH-B-53022, focuses exclusively on computer server, software platform stability, cybersecurity, patching, and data protection, explicitly excluding mechanical HVAC programming, field device work, and controller replacements. The contract encompasses BAS server and host workstation support, supervisory software and licensing maintenance, Windows/OS environment compliance, antivirus and anti-malware protection, database backup and restoration readiness, virtual machine hosting, network firewall and security configuration, and user account and credentials management. The vendor must maintain quarterly OS and security patches, conduct malware scans, monitor system utilization, maintain firewall and network isolation, implement annual cybersecurity reviews, provide automated daily and weekly backups with offsite and onsite storage, and manage user access controls with multi-factor authentication preference. Standard support response time is 24 hours with critical outage response required within 4 hours. The contract term is one year, from July 1, 2026 through June 30, 2027.
The vendor must meet Illinois Department of Innovation and Technology (DoIT) security standards and requirements, with specific detailed requirements to be provided upon award. All assigned personnel must pass required State background checks prior to site and network access. Required deliverables include quarterly server health and update reports, quarterly backup verification documentation, annual cybersecurity posture reports, and semi-annual access and user audit lists. No pricing information, set-asides, incumbent vendor details, or funding sources are specified in this scope document.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Std Terms and Conditions~6.pdf | ||
| Information and Technology Standard Terms and Conditions_v26.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Requisition # 27-444DHS-MENTH-B-53022
Building Automation System (BAS) – IT Security & Server Support Specification
1. Purpose & Scope This procurement is for IT-side support of the Building Automation System (BAS), and generator focused solely on computer/server, software platform stability, cybersecurity, patching, and data protection. The vendor will not be responsible for HVAC programming, field devices, mechanical system control tuning, or controller replacements.
Objective: maintain secure & reliable BAS operation environment while preventing cyber intrusion risks.
2. Systems Covered Under Contract
• BAS server/host workstation
• BAS supervisory software & licensing maintenance
• Windows/OS environment & update compliance
• Antivirus/anti-malware protection
• Database backup and restoration readiness
• Virtual machine hosting (if applicable)
• Network firewall/security configuration for BAS
• User accounts, credentials, and permission access
3. Vendor Responsibilities A. Routine Maintenance:
- Apply OS/security patches quarterly
- Maintain BAS software updates & version control
- Conduct malware scans & prevent threats
- Monitor CPU, memory, storage utilization
B. Cybersecurity Requirements:
- Maintain firewall & network isolation per best practice
- Review cybersecurity configuration annually
- Monitor for intrusion or unauthorized connection attempts
C. Backup & Disaster Recovery:
- Maintain automated daily/weekly scheduled backups
- Offsite + onsite storage required
- Verify recovery capability quarterly
D. Access Control Management:
- Create/disable user accounts when authorized
- Maintain password policies, MFA preferred
E. Response Requirements:
- Standard support response within 24 hours
- Critical outage response within 4 hours
4. Required Deliverables to Owner
• Quarterly server health & update report
• Quarterly backup verification documentation
• Annual cybersecurity posture report
• Semi-annual access/user audit list
5. Explicit Contract Exclusions ✘ No mechanical/HVAC controls troubleshooting ✘ No programming or sequence modifications ✘ No VAV/sensor/field device work ✘ No installation or retrofit labor
6. Vendor Minimum Qualifications
· Ability to meet facility/state IT security standards
· Vendors must comply with applicable Illinois Department of Innovation & Technology (DoIT) security requirements, including but not limited to: Detailed requirements will be incorporated into the contract and/or provided upon award. Vendors must attest to their ability to comply.
· Personnel must meet background screening requirements
· All assigned personnel must pass required State background checks prior to site and network access.
7. Contract Term One (1) year term FY27, 07/01/2026-06/30/2027.
File details come from the government source that posted it. Updated .