PORFP Anomali ISAC_DoIT OSM_2024.docx

Purchase Order Request for Proposals (PORFP) COTS Software Master Contract

Section 1 –General Information

PORFP Number:

(ADPICS PO Number)

FC-007-25

PORFP Type:

(Select one category from drop down list) Fixed

Functional Area/s (FA) for this PORFP:

(Select one category from drop down list) x FA I – COTS Software ☐ FA II – Installation and Training Services ☐ FA III – Manufacturer’s Software Maintenance

Manufacturer Name

(Enter one manufacturer only per PORFP) Anomali ThreatStream

Designated Small Business Reserve?(SBR):

(Select “Yes” or “No” from drop down list) No

PORFP Issue Date:

mm/dd/yyyy

DATE AND TIME:

4/15/2024

2:00 PM

Crownsville, MD 21032

Special Instructions:

1. The Department reserves the right to purchase more or less than the specified quantity to the extent limited by funding.

2. Purchase new and unused equipment.

3. The Master Contractor shall not impose a restocking fee if an item is returned due to damage, or an incorrect product shipped.

4. Master Contractors must provide the estimated ship date/lead time for each item listed in the PORFP.

5. Please allow proposals/quotes provided in response to this PORFP to be valid for at least 90 days after the set due date above.

6. The Master Contractor must be an authorized reseller for Anomali Threatstream. The state reserves the right to request a Letter of Authorization (LOA) from the Manufacturer or Distributor.

7. The Master Contractor must include a screenshot of the Manufacturer’s Suggested Retail Price (MSRP) with the bid.

8. Master Contractors shall furnish any and all agreements and terms and conditions the Master Contractor expects the State to sign or to be subject to in connection with or in order to use the services under this Contract. This includes physical copies of all agreements referenced and incorporated in primary documents, including but not limited to any software licensing agreement for any software proposed to be licensed to the State under this Contract (e.g., EULA, Enterprise License Agreements, Professional Service agreement, Master Agreement) and any Acceptable Use Policy (AUP). The State does not agree to terms and conditions not provided in a Master Contractor’s Technical Proposal or submitted with Financial Proposal and no action of the State, including but not limited to the use of any such software, shall be deemed to constitute acceptance of any such terms and conditions. Failure to comply with this section renders any such agreement unenforceable against the State.

9. Software must be delivered to:

Maryland Department of Information Technology ATTN: Karen Poplewski 100 Community Place

Invoicing Instructions:

1. Email all invoices to: doitfiscal.invoiceservice@maryland.gov.

2. Invoice(s) shall be submitted within 10 days of delivering the software and shall include at a minimum the following:

· Name and address of the Agency being billed.

· Reference the States assigned PORFP number.

· Contractor name, mailing address, social security number or Federal Tax ID number, and phone number.

· Signed and dated.

· Date, invoice number, and amount due.

· Proof of delivery including packing slip or delivery confirmation, and equipment serial numbers.

Section 2 – Agency Point of Contact (POC) Information

Section 3 – Delivery Address / Work Site POC Information (if different from above)

Section 4 – Scope of Work

FA I – COTS Software (Provide product specifications below. If some or all specifications are unknown, Master Contractors may propose products based on a detailed description in the Business Need / Required Functionality field*)

ThreatStream Community powering State of Maryland Information Sharing and Analysis Center (MD-ISAC) is purpose-built to facilitate the collection and management of threat intelligence, from multiple sources and at scale, enabling these processes to be automated, thus mitigating time-intensive manual tasks. ThreatStream Community is designed to enable the secure, meaningful, and automated sharing of relevant threat data (Indicators of Compromise) via bi-directional TAXII capabilities. Strategic Intelligence around Threat Actors, Campaigns, Vulnerabilities, and other models can be distributed to all participants. This allows community members to take a proactive approach by gaining insight into their adversaries.

Product Name

Product Description Version Release

mm/dd/yyyy

State of MD – Redacted Anomali ISAC Model - LIST PRICE – 2024.pdf

07/31/2024

3.

FA II – Installation and Training Services (Provide a detailed description of required services and deliverables)

Installation / Training Services

Deliverables

Start Date mm/dd/yyyy

End Date mm/dd/yyyy

1.

2.

3.

FA III - Manufacturer’s Software Warranty / Maintenance (Provide a detailed description of warranty / maintenance requirements and deliverables)

Warranty / Maintenance Requirements

Deliverables

Start Date mm/dd/yyyy

End Date mm/dd/yyyy

Section 5 – Evaluation Criteria – Technical Proposal (Provide a list of evaluation criteria in descending order of importance)

Evaluation Criteria

1. Price

Basis for Award Recommendation Evaluation criteria for award will be established at the PORFP level. The agency POC will recommend award to the Master Contractor whose proposal is determined to be the most advantageous to the State, considering price and the evaluation factors set forth in the PORFP. The agency POC will initiate and deliver a PO to the selected Master Contractor.

Revised 031208