NHPS_MDR_Project.pdf

For more information, please visit our online supplier portal, located at https://procurement.opengov.com/portal/newhavenct

City of New Haven, CT

REQUEST FOR PROPOSAL

2025-RFP-232

NHPS MDR PROJECT

RELEASE DATE: May 27, 2025

RESPONSE DEADLINE: July 1, 2025, 11:00 am

Please refer to the project timeline in this document for all important deadlines.

Request For Proposal #2025-RFP-232

Title: NHPS MDR Project

Table Of Contents

1. Project Summary

1.1. Summary

1.2. Timeline

1.3. Procurement Contact

2. Instructions to Respondents

2.1. Internet Access

2.2. Solicitation Downloads

2.3. Inquiries for Clarification

2.4. Addendum to Bid Documents

2.5. Contract Term

2.6. Insurance Requirements

2.7. Certification and Licenses

2.8. Unit Prices, Solicitation Quantities and Tax-Exempt Status

2.9. Equal Employment Opportunity

2.10. Construction Related Permits

2.11. Alternate Responses

2.12. Pricing Sheet

2.13. Solicitation Process and Submission

2.14. Solicitation Protest

2.15. Award of Contract

2.16. Execution of Contract

2.17. Notice to Proceed

2.18. No Purchase Order – No Payment Policy

2.19. Electronic Invoice Policy

2.20. Payment Policy

3. Project Details

3.1. Proposal Specifications

3.2. Evaluation Criteria

3.3. Response Submittals

3.4. Attachments

Attachments:

A - 9a-Exhibit _RFP Standard Form of Agreement - City of New Haven

B - 9b-Exhibit_ RFP Standard Terms Part II - City of New Haven

1. Project Summary

1.1. Summary

Contract Name: NHPS MDR Project

Solicitation #: 2025-RFP-232

Department: NHPS-Curriculum

The City of New Haven, Connecticut, is seeking proposals for implementation of MDR service. The purpose of this project is to enhance the cybersecurity posture of NHPS by utilizing advanced detection and response capabilities provided by Arctic Wolf or equivalent . This includes the deployment of necessary technology, professional services, ongoing monitoring, and support to ensure a robust defense against malicious threats and security breaches.

ERate #: CBR420250370

1.2. Timeline

Solicitation/Advertise Date: May 27, 2025

Question & Clarification Deadline: June 17, 2025, 5:00pm

Solicitation Due Date: July 1, 2025, 11:00am

1.3. Procurement Contact

Shawn Garris

Deputy Purchasing Agent

200 Orange Street

New Haven, CT 06510

2. Instructions to Respondents

2.1. Internet Access

A. The City cannot guarantee that equipment involved in Solicitation Submission and/or solicitation technology will be available to provide information or receive transmittals. It is your responsibility to ensure that you have current information and that your Submission is received at the designated location complete and on time. The City is not responsible for the confidentiality of information transmitted over the Internet.

B. Downloading solicitations of any type does not obligate the City to send you future notifications of solicitations or addendum updates.

C. It is the Respondent's responsibility to review your status on our website and update your contact information accordingly.

D. The City does not recommend waiting till the last day to start and/or submit your response.

2.2. Solicitation Downloads

A. Every part of this document may be downloaded from the website at no cost to you. If you require a third party to print the specifications and/or drawings, that cost will be borne by you.

B. Drawing File Format: PDF

C. Click on the "Downloads" to download the drawings.

D. If you don't have Adobe Acrobat and you wish to view the files in PDF format, Download the application here: https://get.adobe.com/reader/

E. Drawings - The following three local firms are examples of companies that can reproduce drawings and/or any portion of the documents. These suggestions are not to be considered endorsements in any way. Any other firm with the AutoCAD, DWG, DXF, DWF & CSF Viewers will also be able to reproduce the drawing files.

2.3. Inquiries for Clarification

A. The City will not respond to a Respondent's request(s) for oral interpretation and/or clarification of the

Solicitation Specifications for any reason.

B. The City will respond to a Respondent’s written request(s) for interpretation and/or clarification of the

Solicitation Specifications.

1. Any written Inquiry for Clarification must be received seven (7) or more business days prior to the

Closing Date. Any request received by the City after this deadline will not be given consideration.

2. Every request for such an interpretation shall be made in writing via City’s e-Procurement Portal's

Question & Answer feature.

https://procurement.opengov.com/portal/newhavenct/projects/171695 https://get.adobe.com/reader/ https://procurement.opengov.com/portal/newhavenct/projects/171695

3. Please do not send questions or requests for clarification in a PDF format.

4. Every interpretation made to a Respondent will be in the form of an Addendum or Question &

Answer to the Solicitation Documents.

2.4. Addendum to Bid Documents

A. All Addenda to the Solicitation Documents shall become part of the Solicitation. Respondents are required to check the Website for Addendum. Each Respondent shall be bound by such Addenda whether or not received/viewed by the Respondent.

B. Questions are submitted through your account and the selected solicitation Web Address:

https://procurement.opengov.com/portal/newhavenct/projects/171695, through the “Question &

Answer” section to submit your question(s).

C. We will endeavor to post Addendums regarding Inquires for Clarification, not less than five (5) calendar days prior to the Bid Closing Date and Time.

D. Addendums regarding extension of time will be posted on the City website, any time prior to the

Solicitation Closing Date and Time.

2.5. Contract Term

The term of the contract is one (1) year with 2 - one (1) year renewal option(s). All renewals will be at the sole discretion of the City and pursuant to the same terms and conditions.

2.6. Insurance Requirements

Proof of insurance is not required to be submitted with your response unless specifically requested, but will be required prior to the City's award of the contract. Refer to the Insurance requirements in the "Insurance

Requirements" section of this document.

The City requires all contractual work to be insured as identified in the following sections.

The term “Contractor” and/or “subcontractor” as used in this section, shall mean, and include Contractors and subcontractors of every tier.

Each Solicitation, Agreement and/or Award will include a specific Risk Template which will detail all the insurance requirements for the project.

Any policies maintained by the contractor and its owned and/or rented equipment and materials shall contain a provision requiring insurance companies to waive their rights of subrogation against the City of New Haven

(Owner) and all other Indemnities named in the contract.

City of New Haven requires all contractors and vendors whose work or services may bring them into direct contact with youth under the age of 21 years to carry a minimum of $1 million in Abuse and Molestation insurance coverage.

Direct contact refers to situations where vendors directly interact with, supervise, or provide services to youth under the age of 21.

Examples of vendors subject to this requirement include:

Therapists Medical professionals Before and after-school program providers

Vendors excluded from this requirement include:

On-call facility-related repair services and construction services (e.g., plumbers, electricians, general contractors, roofers) who do not have direct contact with youth.

This requirement applies to all vendors working on projects within:

City of New Haven facilities New Haven Public Schools (NHPS) facilities

Certificates of Insurance

The successful bidder shall provide certificates with a minimum AM Best’s rating of “A-“VIII of insurance, showing coverage by an insurance carrier authorized by the State of Connecticut to write insurance in the State.

The certificates shall show the City as an additional name insured. Said certificate should contain the following endorsements.

PLEASE NOTE THAT ALL CERTIFICATES OF INSURANCE MUST INCLUDE:

A. The City of New Haven shall be named as an additional insured with subrogation.

B. Endorsement shall include the work description, Contract/Project name and location.

C. Insurance agent contact information, name, email and phone number

D. An endorsement that the insurance company will give at least thirty (30) days written notice to the City prior to any modification or cancellation of any such insurance coverage.

POLICY REVIEW AND APPROVAL

At the discretion of the City, the Contractor may be asked to submit to the City copies of insurance policies for review and approval. The City may, in writing, notify the Contractor of any disapproval of any such policies, and satisfactory policies shall be provided in place of those disapproved.

The Respondent shall submit an insurance certificate in addition to a copy of each policy if requested. The

Contractor shall require its subcontractors to obtain policies of similar insurance before each commences work.

All such insurance shall be carried with financially responsible insurance companies, licensed in the State and approved by the City and shall be kept in force until the Contractor’s work is accepted by the City, which expire before the Contractor’s work is accepted by the City shall be renewed and submitted to the City for its approval.

A. Insurance will be required for the entire term of the contract. The insurance agent contact information(name , email, phone number) must be on the COI. COI are to be emailed to your project contact(see award notice) and NHpurchasingCOI@newhavenct.gov.

B. Renewal Certificates of insurance should email to support@certificail.com

Contractor/Vendor shall agree to always maintain in force during the contract the following minimum coverage and shall name the City of New Haven as an Additional Insured (1) on a primary and non-contributory basis to all policies except Workers Compensation and Professional Liability. All policies, except Professional Liability, should also include a Waiver of Subrogation.

2.6.1. General Liability

Minimum Limits (dollar amount indicates required minimum)

Additional Insured (Y indicates required)

Waiver of Subrogation (Y indicatesrequired)

Each Occurrence $1,000,000 Y Y

Combined

Aggregate

$2,000,000 Y Y

Products/Completed Operations

Aggregate

$2,000,000 Y Y

2.6.2. Cyber Liability

Minimum Limits (dollar amount indicates required minimum)

Additional Insured (Y indicates required)

Waiver of Subrogation (Y indicatesrequired)

-$1,000,000 Y Y

2.6.3. Technology Error & Omissions

Minimum Limits (dollar amount indicates required minimum)

Additional Insured (Y indicates required)

Waiver of Subrogation (Y indicatesrequired)

Each Occurrence $5,000,000 Y Y mailto:NHpurchasingCOI@newhavenct.gov mailto:support@certificail.com

2.6.4. BUILDER’S RISK / INSTALLATION FLOATERS (when applicable) When this contract or agreement includes the construction of and/or the addition to a permanent structure or building; including the installation of machinery and/or equipment, the following insurance coverage must be afforded:

Coverage Form: Completed Value, All Risk in an amount equal to 100% of the value upon completion or value of equipment to be installed.

2.6.5. Additional Information

If any policy is written on a “Claims Made” basis, the policy must be continually renewed for a minimum of two years from the completion date of this contract. If the policy is replaced and/or the retroactive date is changed, then the expiring policy must be endorsed to extend the reporting period for claims for the policy in effect during the contract for two) years from the completion date.

Original, completed Certificates of Insurance must be presented to the City of New Haven via Certificial prior to contract issuance. Contractor/Vendor agrees to provide replacement/renewal certificates at least 30 days prior to the expiration date of the policies. Should any of the polices be cancelled, limits reduced, or coverage altered, 30 days written notice must be given to the City.

2.6.6. Notes

• Additional Insured & Waiver of Subrogation boxes must be checked off on the COI.

• If contractor/vendor will be providing a service in proximity or serving youth under the age of 21, Abuse and Molestation coverage must be included.

• City of New Haven is the Certificate holder and the additional insured.

City of New Haven 200 Orange Street Rm 301 New Haven, CT 06510

2.7. Certification and Licenses

If the service(s) that you are providing is a service for which a certification, license or other form of qualification is required, please provide documentation with your statement of qualifications.

2.8. Unit Prices, Solicitation Quantities and Tax-Exempt Status

A. The Unit Prices for each of the Solicitation items include its pro rata share of overhead so that the sum of the products obtained by multiplying the quantity shown for each item by the unit price represents the total Bid. Special attention is called to this section because in the event it is necessary to revise the quantities, increase or decrease thereof may be made without limit and adjustment and compensation shall be made on the basis of the Unit Prices for such items.

B. Unit Prices should not include federal excise or state sales taxes. State Sales Tax is exempt under

Connecticut General State Statute Sec. 12-412. The City is also exempt from transportation taxes when goods are consigned to the City. Tax Exemption certificates will be furnished by the Supervisory

Auditor - Accounts Payable upon satisfactory proof of delivery to the City.

C. It is understood an agreed that the Unit Prices shall control the Contract award.

D. The quantities noted in this Solicitation are approximate (estimated only for use in comparing Bids); and that the sums obtained by multiplying the Unit Prices by the estimated quantities, and also the Total of these sums, are inserted for the purpose of checking this Solicitation and for the convenience of the

Respondent. The Unit Prices paid are for the actual ordered quantities only.

E. Shipments should be consigned to the City in care of the Contractor.

F. Unbalanced high or low Bid Unit Prices will be reviewed and may be grounds for rejection.

G. Pricing and Supply of Good and Services submitted by vendor as a result of this solicitation must be maintain for at least twelve (12) months from the date of bid submission, unless an increase in length is noted in the specification section of this solicitation.

2.9. Equal Employment Opportunity

A. A pre-award conference concerning equal employment opportunity compliance by the Awardee will be scheduled the week prior to the City’s authorizing the award. The contractor will receive forms and other documentation that must be completed and returned to the City prior to the date of the pre-award conference. The Contractor's Affirmative Action/Equal Opportunity compliance report will represent the major focus of discussion at the pre-award conference. The contractor is responsible for satisfying the affirmative action/equal opportunity provisions as set forth in or referred to in these Solicitation

Documents.

B. Any proposed subcontract under this Contract must submit a certification regarding Equal Employment

Opportunity, similar to that submitted by the Respondent. Approval of the subcontractor award cannot be given by the owner unless and until the proposed subcontractor has submitted the certification and/or other evidence that it has fully complied with any reporting requirements to which it is or was subject.

C. Although the Respondent is not required to attach such certification by proposed subcontractors to its

Response, the Respondent is herein advised of this requirement so that appropriate action can be taken to prevent subsequent delay in subcontract awards.

D. The Equal Employment Opportunity ordinance can be found in Section 12 ½ of the City of New

Haven’s Code. Please review for further details

2.10. Construction Related Permits

The contractor is responsible for all fees associated with Permits.

2.11. Alternate Responses

No alternate responses will be considered unless alternate responses are specifically requested by the City.

2.12. Pricing Sheet

A. Please provide your pricing matrix via Response Submittals. The City of New Haven must be readily able to discern your pricing Qualifications at a quick glance.

B. A brand name, model number or other designation that identifies the product of a manufacturer may be indicated. Other brands will be considered, provided they meet the quality standards of the brands listed within. Product literature, i.e. (M.S.D.S.) must accompany any substituted product with your submission.

2.13. Solicitation Process and Submission

2.13.1. Solicitation Process

A. Early Submittal of Digital Responses - Responses received prior to the advertised hour of closing are kept sealed on the City's e-Procurement Portal.

B. Solicitation Closing - At the time fixed for the submission deadline of responses, the City will open the

Digital Response received by the submission deadline utilizing the City's e-Procurement Portal. Pricing information will be available publicly and can be accessed at:

https://procurement.opengov.com/portal/newhavenct/projects/171695 in the "Results" tab. Respondents and other interested parties can visit the City's e-Procurement Portal for the list of respondents and their respective pricing information. To receive notifications regarding the pricing results, interested parties must click on "Follow" on the Public Solicitation Portal.

C. Late Submittals – with the advent of complete digital bidding, no submission will be accepted after the closing date and time.

D. Withdrawal of Responses - Responses may be withdrawn by you prior to the submission deadline of responses by you retracting your digital response submission.

E. Response Rejections - The City reserves the right to reject any and all responses which do not meet the requirements. Some reasons for rejection include, but are not limited to: altered or qualified contractual terms, non-conforming Response, incomplete or erroneous paperwork, and/or not habitually performing with the Respondent's own forces.

F. Solicitation Rejection Notification - Should the City reject a response for any reason, the Submitter shall be notified. In case of such rejection, the City will return the Bid Bonds to the Respondent(s). No other part of a Respondent's Submission will be returned.

2.13.2. Solicitation Submission

A. Electronic/digital Submissions - Follow instruction on the portal for bid submission – all required forms are indicated as such.

B. Each solicitation response must be submitted in the prescribed format. All blank spaces must be filled in as noted. Responses must give the prices in numerical figures. No changes shall be made to the City’s documents for any reason.

C. The Respondent shall sign their Response in the blank space provided for this purpose. If the solicitation response is made by a partnership or corporation, the name and address of the partnership or corporation shall be indicated and the Response Submission must be acknowledged by a corporate officer as applicable. Any partner of corporate stockholder owning 25% or more of the business shall also be disclosed.

D. The City may consider any Submission not prepared and submitted in accordance with the provisions hereof, and may, at its option, waive any informalities.

E. No Respondent may withdraw a submission within one hundred twenty (120) days after the actual date of the opening thereof.

2.14. Solicitation Protest

A. Any Solicitation protest must be submitted in writing. Respondents may file a written protest of the

Solicitation results with the City's Purchasing Agent, within 48 hours of the posting of the Solicitation results on the City Website.

B. A protest must be submitted via email, purchasing@newhavenct.gov, or Fax, 203-946-8206.

C. The City will acknowledge receipt of written protest. If the Purchasing Agent or representative has not acknowledged receipt of the protest by the close of business on the following day, please contact the

Bureau of Purchases at 203-946-8201 or by Fax at 203-946-8206.

2.15. Award of Contract

A. No contract shall be awarded to any contractor, if the entity, or any owner, officer or director thereof is delinquent in any tax or other financial obligation to the city, including, without limitation, a current or ongoing contract dispute concerning performance under an agreement with the municipal government if, in the opinion of the Corporation Counsel, the current or ongoing contract dispute is related to the requirements of the solicitation.The fact that any other entity of which the owner or principal of any contractor is an officer or director is delinquent in the payment of any tax or other financial obligation to the city, shall be a negative factor in the selection or award of such contractor until such obligation is settled.

mailto:purchasing@newhavenct.gov

B. The City will endeavor to award a contract for this Solicitation within one hundred and twenty (120) days after the date of the Solicitation opening. All Respondents acknowledge their Response submittal will be valid for the duration of the one hundred and twenty (120) days timeframe.

C. The City reserves the right to separately Solicitation or secure pricing from additional contractors that may relate to the goods and/or services in the instant Solicitation, whether or not such goods and/or services are additional to the quantities stated in the instant Solicitation.

D. The City of New Haven reserves the right to award one or more contracts as a result of this solicitation.

E. The City will not award to any contractor who is ineligible under any of applicable regulations issued by the Secretary of Labor and United States Department of Labor.

F. The City will not award to any contractor who is not qualified under applicable State and local laws and regulations.

G. Without limiting the generalities of the foregoing, a contractor will be deemed ineligible if they are not current with any taxes or other outstanding obligations to the City of New Haven.

H. Should a Contract be awarded, it will be awarded by the City to the lowest responsible qualified

Respondent based on the lowest Base Bid.

I. Availability of funds – The awarding of all contracts is contingent upon the availability of appropriate funds. If funding is not available at the time of award and/or execution of the contract the City reserves the right to cancel the Solicitation.

J. All Bid Bonds will be returned to all Respondents upon the execution of the contract documents to the awarded Respondent.

K. Certificate of Insurance must be email to project manager (see award notice) and to

NHpurchasingCOI@newhavenct.gov

2.16. Execution of Contract

A. In executing the Agreement, the Awardee will be required to reaffirm and restate all representations made in its Response Submission.

B. After the notice of award and within ten (10) days after the prescribed forms are presented for signature, the Awardee shall execute and deliver to the City the Agreement in the form included in the Contract

Documents, in such number of copies as the City shall require.

C. The failure of the Awardee to execute such Agreement, pay any taxes due, to supply the required bonds or submit the Certificate of Insurance, all within ten (10) days after the prescribed forms are presented for signature, or within such extended period as the City grants based upon reasons determined sufficient by the City, shall constitute a default and the City reserves the right to any remedies available at law or in equity including pursuit of Bid Bond. The City may either award the Contract to the next lowest responsible Respondent or re-advertise the Solicitation.

mailto:NHpurchasingCOI@newhavenct.gov

D. Performance Labor and Material Bonds - (see Project Summary for applicability)Having satisfied all conditions of award as set forth elsewhere in these documents, the successful Respondent shall, within the period specified in paragraph "A" above, furnish a bond in a penal sum not less than the amount of the Contract as awarded, as security for the faithful performance of the Contract, and a labor and material bond for payment of all persons, firms or corporations to whom the Contractor may become legally indebted for labor, materials, tools, equipment, or services of any nature including utility and transportation services, employed or used by him in performing the work. Such bonds shall be in the same form as those included in the Solicitation Documents and shall bear the same date, or a date after that of the Agreement. These bonds shall be signed and issued by a guaranty or surety company satisfactory to the City, authorized and qualified to do business in the State of Connecticut, and listed in the latest issue of the U.S. Treasury Circular 570, and the penal sum of any such bond shall be within the maximum specified for such company in said Circular 570. The current power of attorney for the person who signs for any surety company shall be attached to such bonds.

E. Commencement of Work – The City will not be responsible for payment of any work performed or materials supplied by the successful respondent before the Contractor receives a fully executed agreement unless an emergency situation has been declared by a City employee duly empowered to do so, and the vendor receives written authorization from this individual to proceed. Note: Responsibility for payment shall be limited to only that work deemed necessary by the City to alleviate the immediate emergency

2.17. Notice to Proceed

Once a contract is formally signed and in effect, the specific City department that initiated the need for the contracted work will then issue a Notice to Proceed (NTP). This official written communication formally authorizes the contractor to commence the contracted services or project. The NTP typically specifies the start date of the work and may also include important details such as:

• Project name and contract number: For clear identification.

• Contact information: For relevant City and contractor personnel.

• Project schedule and milestones: Outlining key deadlines and deliverables.

• Specific instructions or clarifications: Regarding the execution of the work.

• Conditions for commencement: Any prerequisites that must be met before work can begin.

2.18. No Purchase Order – No Payment Policy

Policies and Procedures

The City of New Haven has implemented a 'No Purchase Order, No Payment Policy’ effective July 1, 2019 to reduce cost overruns, unauthorized work, while automating the steps for payment of invoices. This means that without an official Purchase Order number and/or enough unencumbered funds available, payment of supplier https://www.newhavenct.gov/government/departments-divisions/purchasing-division/general-information/policies-and-procedures invoices will be rejected or significantly delayed until the change order or adjustments can be processed and approved.

This policy aims to ensure that:

A. All spend shall be supported by an authorized PO prior to requesting the provision of goods/services.

B. Efficient processes are implemented so that goods are delivered when required.

C. The recipient of the goods shall receipt in Munis as soon as the goods are delivered/services performed

(i.e. not upon receipt of the invoice);

D. Cost control is effective and therefore:

E. all expenditure incurred by the City of New Haven is valid and appropriately authorized; and

F. minimizing transactional costs associated with payment for goods and services.

2.19. Electronic Invoice Policy

https://www.newhavenct.gov/government/departments-divisions/purchasing-division/e-invoicing-policy

2.20. Payment Policy

https://www.newhavenct.gov/government/departments-divisions/purchasing-division/payment-policy https://www.newhavenct.gov/government/departments-divisions/purchasing-division/e-invoicing-policy https://www.newhavenct.gov/government/departments-divisions/purchasing-division/payment-policy

3. Project Details

3.1. Proposal Specifications

3.1.1. MDR Project

The following specifications outline the components required for the MDR Project, aligning with industry standards for cybersecurity and information security practices.

A. Technology Requirements:

o Deployment of Arctic Wolf or equivalent cloud-based security solutions, including Security

Operations Center (SOC) services.

o Implementation of endpoint detection and response (EDR) capabilities across NHPS devices and servers.

o Integration of existing NHPS security infrastructure with Arctic Wolf or equivalent.

o Provision of threat intelligence feeds that align with the latest cybersecurity standards, including

NIST SP 800-53, ISO 27001, and CIS Controls.

B. Service Requirements:

o 24/7 monitoring and logging of security events and incidents across all NHPS endpoints.

o Real-time alerting and incident response to detected threats.

o Monthly vulnerability assessments and reports detailing security posture and improvement recommendations.

o Quarterly security reviews and compliance audits in accordance with relevant standards.

C. Staff Training and Support:

o Comprehensive training programs for NHPS staff to ensure awareness and understanding of cybersecurity best practices.

o Development of an incident response plan specific to NHPS, in collaboration with the City of New

Haven's IT department.

o Access to ongoing technical support, including a dedicated account manager.

Relevant Standards

All services and products provided under this scope must adhere to the following standards and guidelines:

A. NIST Cybersecurity Framework (NIST CSF)

B. NIST Special Publication 800-53 (Security and Privacy Controls for Information Systems and

Organizations)

C. ISO/IEC 27001 (Information Security Management Systems)

D. Center for Internet Security (CIS) Critical Security Controls

E. Cybersecurity Maturity Model Certification (CMMC) requirements as applicable

Delivery Requirements

All products and services shall be delivered according to the following requirements:

A. Timeline:

o Selected vendor to commence the project within two weeks after funding approval.

o Delivery Schedule:

▪ Scheduled deployment meetings should be proposed in the vendor's response to ensure alignment with NHPS operations.

▪ Regular project updates to be provided weekly throughout the implementation phase.

B. Documentation:

o All delivered products and services must be documented, along with user manuals and training materials.

o Post-deployment evaluation report detailing system performance and recommendations for continuous improvement.

3.2. Evaluation Criteria

No

Evaluation Criteria Scorin g

Metho d

Weigh t

(Point s)

1. I. Technology Requirements

• 1.1. Solution Deployment:

o Criterion: Does the proposal clearly outline the deployment strategy for the MDR's cloud-based security solutions, including SOC services?

o Weight: High o Evaluation Points:

▪ Clarity and completeness of the deployment plan.

▪ Demonstrated understanding of the MDR's architecture.

▪ Proposed approach for seamless integration.

• 1.2. EDR Capabilities:

o Criterion: How comprehensively does the proposal address the implementation of EDR capabilities across all

NHPS devices and servers?

o Weight: High o Evaluation Points:

▪ Detailed plan for EDR rollout and management.

▪ Approach to handling diverse device types and operating systems.

▪ Strategy for minimizing disruption during deployment.

• 1.3. Infrastructure Integration:

o Criterion: Does the proposal provide a robust plan for integrating existing NHPS security infrastructure with the MDR's solutions?

o Weight: Medium o Evaluation Points:

▪ Identification of key integration points.

▪ Proposed methods for data synchronization and API utilization.

▪ Demonstrated understanding of NHPS's current security ecosystem.

• 1.4. Threat Intelligence Feeds:

o Criterion: Does the proposal demonstrate the provision of threat intelligence feeds that align with specified cybersecurity standards (NIST SP 800-53, ISO 27001, CIS Controls)?

o Weight: High o Evaluation Points:

▪ Evidence of adherence to listed standards for threat intelligence.

N/A N/A

▪ Description of intelligence sources and update frequency.

▪ How threat intelligence will be leveraged within the MDR's platform.

o

2. Service Requirements

• 2.1. 24/7 Monitoring and Logging:

o Criterion: Does the proposal clearly detail how 24/7 monitoring and logging of security events and incidents will be achieved across all NHPS endpoints?

o Weight: High o Evaluation Points:

▪ Description of monitoring tools and processes.

▪ Logging retention policies and accessibility.

▪ Demonstrated capacity for continuous operations.

• 2.2. Real-time Alerting and Incident Response:

o Criterion: How effective is the proposed approach for real-time alerting and incident response to detected threats?

o Weight: High o Evaluation Points:

▪ Defined service level agreements (SLAs) for alerting and response.

▪ Proposed incident escalation procedures.

▪ Experience and capabilities of the incident response team.

• 2.3. Vulnerability Assessments and Reports:

o Criterion: Does the proposal include a comprehensive plan for monthly vulnerability assessments and reports, detailing security posture and improvement recommendations?

o Weight: Medium o Evaluation Points:

▪ Methodology for vulnerability scanning and analysis.

▪ Clarity and actionable nature of proposed reports.

▪ Process for delivering and reviewing recommendations.

• 2.4. Security Reviews and Compliance Audits:

o Criterion: How well does the proposal address quarterly security reviews and compliance audits in accordance with relevant standards?

o Weight: High o Evaluation Points:

▪ Detailed plan for conducting reviews and audits.

▪ Demonstrated understanding of applicable compliance standards.

▪ Reporting structure and follow-up mechanisms for audit findings.

3. Staff Training and Support

• 3.1. Comprehensive Training Programs:

o Criterion: Does the proposal include comprehensive training programs for NHPS staff to ensure awareness and understanding of cybersecurity best practices?

o Weight: Medium o Evaluation Points:

▪ Scope and content of training modules.

▪ Proposed delivery methods and frequency.

▪ Metrics for assessing training effectiveness.

• 3.2. Incident Response Plan Development:

o Criterion: How robust is the proposed collaboration with the City of New Haven's IT department for developing an incident response plan specific to NHPS?

o Weight: High o Evaluation Points:

▪ Clear outline of collaborative efforts and roles.

▪ Timeline for plan development and testing.

▪ Integration with existing city-wide incident response frameworks.

• 3.3. Ongoing Technical Support:

o Criterion: Does the proposal provide clear access to ongoing technical support, including a dedicated account manager?

o Weight: Medium o Evaluation Points:

▪ Availability and contact methods for technical support.

▪ Experience and qualifications of the proposed account manager.

▪ Defined escalation paths for critical issues.

4. Adherence to Relevant Standards

4.1. Compliance Framework Alignment:

• Criterion: Does the proposal explicitly demonstrate adherence to the NIST Cybersecurity Framework (NIST CSF), NIST SP 800-53, ISO/IEC 27001, CIS Critical Security Controls, and CMMC requirements (as applicable)?

• Weight: High

• Evaluation Points:

o Specific examples of how services/products align with each standard.

o Documentation of compliance processes and certifications.

o Methodology for maintaining ongoing compliance.

5. Delivery Requirements

• 5.1. Timeline Adherence:

o Criterion: Does the proposal commit to the specified timeline for project commencement and initial deployment?

o Weight: High o Evaluation Points:

▪ Clear project plan with defined milestones and deadlines.

▪ Feasibility of meeting the stipulated "within two weeks of contract award" commencement.

▪ Realistic completion of initial deployment within the specified "number of days."

• 5.2. Delivery Schedule:

o Criterion: Does the proposal include a well-defined delivery schedule with proposed scheduled deployment meetings and regular project updates?

o Weight: Medium o Evaluation Points:

▪ Proposed frequency and agenda for deployment meetings.

▪ Commitment to weekly project updates during implementation.

▪ Clarity of communication plan throughout the project lifecycle.

• 5.3. Documentation:

o Criterion: Does the proposal commit to providing comprehensive documentation, including user manuals, training materials, and a post-deployment evaluation report?

o Weight: Medium o Evaluation Points:

▪ Outline of documentation deliverables and formats.

▪ Proposed content for user manuals and training materials.

▪ Plan for generating and delivering the post-deployment evaluation report.

3.3. Response Submittals

1. Technical Proposal (without cost)* *Response required

2. Cost Proposal* *Response required

3. City Forms Signature Sheet* You are required to complete the following DocuSign form. Please download the below document, complete and have notarized. An online notarization option will be provided for you when responding.

Click here to go to the form

*Response required

4. DISCLOSURE & CERTIFICATION AFFIDAVIT*

Your are required to complete the following DocuSign form. Please download the below document, complete and have notarized. An online notarization option will be provided for you when responding.

Click here to go to the form

*Response required

5. Current Workforce Certificate* Please download the below documents, complete, and upload.

• Current_Workforce_Certifica...

*Response required

6. PPP - Priority Payment Program Application* Please download the below documents, complete, and upload.

• Priority_Payment_Program.pdf

*Response required

7. Statement of Qualifications for City Statement of Qualifications:

Each solicitation response shall include a Statement of Qualifications in the format provided in this

Solicitation upon stationary of the responding entity.

All questions must be answered, and the data given must be clear and comprehensive. The respondent may submit any additional information he/she desires.

7.1. Permanent Main Office Address*

*Response required

7.2. When Organized*

*Response required

7.3. Legal form of ownership. If a corporation, where incorporated.*

*Response required

7.4. How many years have you been engaged in services, under your present name?*

*Response required https://na3.docusign.net/Member/PowerFormSigning.aspx?PowerFormId=f5c2312b-a468-49f8-8e4b-21b845ae0a04&env=na3&acct=c571f5cd-3c19-4987-8f37-23d14aa4ba02&v=2 https://na3.docusign.net/Member/PowerFormSigning.aspx?PowerFormId=fc2842d4-2626-4a80-865b-41e2d926ce22&env=na3&acct=c571f5cd-3c19-4987-8f37-23d14aa4ba02&v=2 https://government-project.s3.us-west-2.amazonaws.com/84780/54909ddb-005f-4f67-84aa-87b301443feb_Current_Workforce_Certificate.xlsx?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIA47RIURE4MWAQUBXT%2F20250527%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20250527T130001Z&X-Amz-Expires=72000&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJT%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJGMEQCICrDHkpaQeNW4VW7lR2lMZ4j5543Pvj2rZIkfbTGN%2BqbAiAY9zSPGvqoXduWIOD9D5qdykq6DRnIMo2Lli3SNmXlByqDBQhdEAIaDDg5MjM2NDY4NzY3MiIMVJjbp8pyNtDjl4l5KuAEjQky5tvfXW%2FSeiQYuRL4HL1p5NXw%2B3mN%2FKHrqaJuagm7pMw%2BbWH6Plwwkh7wR3rC%2Bt3ss4VbYC%2BWnjTEDC5bD2i%2FypfyY65PPZkVtMpWayisYerfhE3NHTkNkmzSOhJuay9JAVHg%2Fjr8x7lRRExMqo4n7yOQGaAt5LhBM9UEZxOtP00oVML7gAphjbQJB%2BRZAlnjU9hjciCpfhppQh401AB2OdyYLdPGJMyleU3KCOJhxGYhhy4PpMlXc4kMYEa7uwMdKkxlfdaHxNl9%2FAk%2BDm2kx%2Fm4A3Cge%2BVdY09RXaMUV2Sz7SZlxJdc099j%2FuZFncIuYJWGhpjk4%2Bp3KNP8BT8KUNH9cMZ2cjSyOHut0dqv%2BnWDA3Z0uyeuAdvwWQF9TCFsRlCy3RkBEk9yxtlSF8xV2qvoMoHX25CG8xJVPj%2FIW0FPeV4W3wIGmE%2B2vlV%2BXDxRP44Uc8tetXlouuPOlhO3H6GCZK%2BEU14d2cmW3VhqOLGgiz8u8Ly1efaBq7tXyvRvWzIdhFCkfiqd5p%2FKPxXl1y2qJAt%2BFXN4yAXO6aMiwtkq6nEb%2Fwv8PpjWXGXQUo6zuWyRlZ3eQjpa%2BTOBkwIAnZbrWmtRaPKC1v1zH1imaOLuUA4pflj16WgMyTP79flwzoC%2F9g9OVu1Zn7K9obb6beAJFrPX8heE01p2OPrTEDcLFItRs6K6v8jgnJLDY4uK4LzlOBd%2Br8Q4aR2MO%2B4eFHqWYkkDOJM2z662Kl0UuB29qIr%2B0efjyaya3ZsMCMurWbv%2BCpvFHp1hwc%2F%2BtoF%2FCOJmal%2BD4amKRVI%2FpvowpNPWwQY6nAHJJJcnes%2FD8NPnFhVxmL8UlBED4IaDJF0zxvP6Fu4PENptb4zfAPEJ0NYjlsTxZXJ9Qgd9NzJuw2gv1bM7v9Q%2BbXQQ%2FrGVmj1eqjCSIgvaOQkvLIl%2FuiteBXV%2BCieqDIP%2F8AozSUTHJCA1ctgU3uvr8dPwmStzUVpw%2B66c4EJYhyhDP6M8oHKZAUyhZXOOnHuKzMN2ZFg%2FTbrQj%2FA%3D&X-Amz-Signature=51fc02f72a08d8ae40bb469069718be1e4772ee849f7ab162a48bbf84d6b2159&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3D%22Current_Workforce_Certificate.xlsx%22&x-id=GetObject https://government-project.s3.us-west-2.amazonaws.com/84780/9ae17ae0-47ba-465b-aceb-3c8235db81c6_Priority_Payment_Program.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=ASIA47RIURE4MWAQUBXT%2F20250527%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20250527T130001Z&X-Amz-Expires=72000&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJT%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLXdlc3QtMiJGMEQCICrDHkpaQeNW4VW7lR2lMZ4j5543Pvj2rZIkfbTGN%2BqbAiAY9zSPGvqoXduWIOD9D5qdykq6DRnIMo2Lli3SNmXlByqDBQhdEAIaDDg5MjM2NDY4NzY3MiIMVJjbp8pyNtDjl4l5KuAEjQky5tvfXW%2FSeiQYuRL4HL1p5NXw%2B3mN%2FKHrqaJuagm7pMw%2BbWH6Plwwkh7wR3rC%2Bt3ss4VbYC%2BWnjTEDC5bD2i%2FypfyY65PPZkVtMpWayisYerfhE3NHTkNkmzSOhJuay9JAVHg%2Fjr8x7lRRExMqo4n7yOQGaAt5LhBM9UEZxOtP00oVML7gAphjbQJB%2BRZAlnjU9hjciCpfhppQh401AB2OdyYLdPGJMyleU3KCOJhxGYhhy4PpMlXc4kMYEa7uwMdKkxlfdaHxNl9%2FAk%2BDm2kx%2Fm4A3Cge%2BVdY09RXaMUV2Sz7SZlxJdc099j%2FuZFncIuYJWGhpjk4%2Bp3KNP8BT8KUNH9cMZ2cjSyOHut0dqv%2BnWDA3Z0uyeuAdvwWQF9TCFsRlCy3RkBEk9yxtlSF8xV2qvoMoHX25CG8xJVPj%2FIW0FPeV4W3wIGmE%2B2vlV%2BXDxRP44Uc8tetXlouuPOlhO3H6GCZK%2BEU14d2cmW3VhqOLGgiz8u8Ly1efaBq7tXyvRvWzIdhFCkfiqd5p%2FKPxXl1y2qJAt%2BFXN4yAXO6aMiwtkq6nEb%2Fwv8PpjWXGXQUo6zuWyRlZ3eQjpa%2BTOBkwIAnZbrWmtRaPKC1v1zH1imaOLuUA4pflj16WgMyTP79flwzoC%2F9g9OVu1Zn7K9obb6beAJFrPX8heE01p2OPrTEDcLFItRs6K6v8jgnJLDY4uK4LzlOBd%2Br8Q4aR2MO%2B4eFHqWYkkDOJM2z662Kl0UuB29qIr%2B0efjyaya3ZsMCMurWbv%2BCpvFHp1hwc%2F%2BtoF%2FCOJmal%2BD4amKRVI%2FpvowpNPWwQY6nAHJJJcnes%2FD8NPnFhVxmL8UlBED4IaDJF0zxvP6Fu4PENptb4zfAPEJ0NYjlsTxZXJ9Qgd9NzJuw2gv1bM7v9Q%2BbXQQ%2FrGVmj1eqjCSIgvaOQkvLIl%2FuiteBXV%2BCieqDIP%2F8AozSUTHJCA1ctgU3uvr8dPwmStzUVpw%2B66c4EJYhyhDP6M8oHKZAUyhZXOOnHuKzMN2ZFg%2FTbrQj%2FA%3D&X-Amz-Signature=23ff92fe6d7bccd641bf54f9f198d98e513c841e3cec3b4519406ec2099a2ccb&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3D%22Priority_Payment_Program.pdf%22&x-id=GetObject

7.5. Have you ever failed to complete any work awarded to you? If so, where and why?*

7.6. Have you ever defaulted on a contract? If so, where, and why?*

*Response required

7.7. Describe any pending litigation or other factors, which could affect your organization's ability to perform this agreement.*

*Response required

7.8. Names, titles, reporting relationships, and background and experience of the principal members of your organization, including the officers. Indicate which individuals are authorized to bind the organization in negotiations with the City of New Haven.*

*Response required

7.9. Name, title, address, and telephone number of the individual to whom all inquiries about this

Proposal should be addressed.*

*Response required

7.10. Will you, upon request, fill out a detailed financial statement and furnish any other information or sign a release that may be required by the City of New Haven?*

☐ Yes

☐ No

*Response required

7.11. Tax Identification number(s)*

*Response required

7.12. UEI Identification Number *

*Response required

7.13. Are you able to receive Credit Card Payments for your services rendered?*

☐ Yes

☐ No

*Response required

7.14. Attached to this solicitation are contract exhibits for your review. Please be advised that the City of

New Haven maintains a standardized set of contractual terms and conditions that are not subject to negotiation. If your proposal is selected for award, you will be required to adhere strictly to the terms and conditions outlined in this document.*

By submitting a response to this solicitation, you acknowledge and accept this requirement as a condition of award."

☐ Please confirm