RFI 2025000061, Cybersecurity Solutions Market Research.pdf

Request For Information EGBA 2025000061

Cybersecurity Solutions Market Research

All questions and inquiries regarding Procurement related matters:

- Mike Whalen

- mike.whalen@state.co.us mailto:mike.whalen@state.co.us

RFI 20250000061, EDR Enterprise Agreement

Schedule of Activities

Activity Time Date

Solicitation Publication (VSS) 1:30pm 7/11/2025

Vendor Response Submission Deadline 1:30pm 8/1/2025

Completion of Market Research TBD TBD

● RFIs are formal market research tools. Strict adherence to the Schedule of

Activities is not mandatory, and the State in its sole discretion, may accept, open and review proposals before or after the noted Submissions Deadline.

● A Notification of “Completion of Market Research” will be posted to VSS when the internal stakeholders deem this process as complete. This will mark the formal closure of the RFI

Please submit to the following address: http://www.bidnetdirect.com//oit

Table of Contents

Schedule of Activities 1 Table of Contents 1

Section 1 Request for Information 2

1.1. Market Research Only 2

1.2. Confidentiality 2

Section 2 Market Research Scope of Work 3

2.1. Introduction 3

2.2. Request for Information Goals 3

2.3. Demos of Proposed Solutions 4

Section 3 General Administrative Information 5

3.1. Colorado Vendor Self Service 5

3.2. News Releases and Announcements 5

3.3. Procurement Conflict of Interest Technical Guidance 5

3.4. Procurement Conflict of Interest 5

3.5. Response Material Ownership 5

3.6. Submission of Pricing information 5

3.7. Submission of Confidential or Proprietary Information 6

http://www.bidnetdirect.com//oit

Section 1 Request for Information

1.1. Market Research Only

This is a Request for Information (RFI) and is intended only for market research purposes. In accordance with §24-103-201.5, C.R.S and the associated Colorado

Procurement Rules, this is not a solicitation. No award will result from any response to any vendor responding to this RFI. This RFI is considered formal market research for the purposes of §24-37-302(1) (a.5), C.R.S., if applicable.

1.2. Confidentiality

a. All responses to this RFI shall be considered confidential until after an award based on a subsequent solicitation has been made or until the procurement official from the issuing agency determines that the state will not pursue a solicitation based on this RFI. After such time, the responses to this RFI shall be open to public inspection in accordance with the provisions of the Colorado Open Records Act. Reference §24-103-201.5(4), C.R.S.

b. The State reserves the right to have information submitted in response to this RFI be reviewed by other entities within the State for purposes of compiling and analyzing possible options.

Section 2 Market Research Scope of Work

2.1. Introduction

The State of Colorado’s Office of Information Technology (OIT) is responsible for providing information Technology resources to agencies and State entities.

This includes: Technology infrastructure, Software, Hardware, Storage, Telecommunication, Cyber security, and professional services. This Request for

Information (RFI) has been issued for the purposes of Market Research in the domain of cybersecurity solutions.

2.2. Request for Information Goals

It is the goal of this RFI to understand the current landscape of cybersecurity technologies, capabilities, and service offerings that can address evolving threats and our organization's specific needs. Our team is interested in detailed information on the following areas. Vendors are instructed to respond to any and all areas relevant to their proposed platform.

a. Vendor and Company Information

i. Company Overview

ii. Experience and Expertise

iii. Client and prior government experiences

b. Solution Capabilities and Offerings

i. Solution portfolio

ii. Key Features and Differentiators to the market standards

iii. Threat Detection and Response

iv. Integration and Interoperability

v. Scalability and Performance

vi. Deployment Models

vii. Reporting and Analytics:

c. Implementation, Training, and Support

i. Implementation Process

ii. Training Services

iii. Support services and engagements

iv. Managed Services

d. Future Development and Roadmap

i. Product Roadmap

ii. Emerging Technologies and trends

e. Compliance and Certifications

i. Industry Standards and Relevant Certifications

Responses should be concise yet comprehensive. Please organize your response according to the sections outlined above. Include any relevant brochures, white papers, or technical documentation that further elaborate on your offerings. While understanding Pricing is not within the scope of this engagement, Vendors wishing to submit pricing models may do so. However, no award shall be made pursuant to this Solicitation. However, vendors are also encouraged to highlight any cooperative purchasing agreements for their proposed solution that OIT may leverage.

2.3. Demos of Proposed Solutions

Vendors may be granted an audience to perform demos within the

"Cybersecurity Solutions" domain. Interested vendors should submit the information required in this form [https://forms.gle/VYUKXffaQaQhD8Ea6] to be considered. The Evaluation team will review submissions and contact vendors to schedule demonstrations who they determine (in their sole discretion) to be responsive and responsible. Proposing organizations shall not contact any member of the OIT team directly regarding updates, scheduling, or non-solicited activities. Vendors interested who have administrative-related requests are directed to contact Mike Whalen (mike.whalen@state.co.us).

2.4. Vendor Response Criteria:

At a minimum, vendors are instructed to complete the form noted in section

2.3. However, vendors wishing to share context above and beyond basic information may also complete a formal proposal, by answering requests raised in section 2.2. Responses to section 2.2 should be submitted to BidNet.

https://forms.gle/VYUKXffaQaQhD8Ea6 mailto:mike.whalen@state.co.us

Section 3 General Administrative Information

3.1. Colorado Vendor Self Service

This RFI is being published on the Colorado Vendor Self Service page (Colorado

VSS) at www.colorado.gov/vss, along with bidnet.com so Respondents who have an interest may submit a response in accordance with the terms of this RFI.

3.2. News Releases and Announcements

Respondents shall not issue any news releases, communications or announcements of any kind pertaining to this solicitation, without prior written approval by the State.

3.3. Procurement Conflict of Interest Technical Guidance

Both Vendors and Internal State of Colorado employees are required to uphold, honor, and work within the stated guidelines of the “Procurement Conflict of

Interest” technical Guidance, which may be found at the following URL:

https://osc.colorado.gov/procurement-conflict-of-interest-technical-guidance

3.4. Procurement Conflict of Interest

Both Vendors and Internal State of Colorado employees are required to uphold, honor, and work within the stated guidelines of the “Procurement Conflict of

Interest” pursuant to State Controller Policy, effective 9/16/2017, which may be found at the following URL:

https://osc.colorado.gov/procurement-conflict-of-interest

3.5. Response Material Ownership

All material submitted in response to this RFI becomes the property of the State.

3.6. Submission of Pricing information

In order to assist the state in gathering information, this RFI may request that

Respondents submit pricing information. Submission of pricing information is not mandatory and such information may be voluntarily included in a response.

http://www.colorado.gov/vss https://osc.colorado.gov/procurement-conflict-of-interest-technical-guidance https://osc.colorado.gov/procurement-conflict-of-interest

3.7. Submission of Confidential or Proprietary Information

a. As per §24-103-201.5, C.R.S, all responses to requests for information are confidential until after an award based on a subsequent solicitation has been made or until the procurement official determines that the state will not pursue a solicitation based on the RFI. After such time, the responses to a RFI shall be open to public inspection in accordance with the provisions of the “Colorado Open Records Act”, part 2 of the article 72 of this title 24.

b. A Respondent may submit, as a part of its Response, a written request for classification of certain portions of the response as a trade secret or other confidential or proprietary information. Material for which the Respondent is requesting confidentiality shall be readily identifiable and separated from other portions of the response to facilitate public inspection of the non-confidential portion of the response. Commingling of confidential and non-confidential information is not acceptable. Neither price information nor any information that will be included in a resulting Contract or purchase order will be considered confidential.

c. The Respondent must include the rationale for any request to classify portions as a trade secret or confidential or proprietary, including references to the authority that allows for such treatment.

d. A complete redacted response should also be included along with an unredacted Response and confidentiality justification.

e. Except as provided in Section 1.2 above, in no event shall an entire response be classified as confidential. The Procurement Official or his or her designee shall determine if the information identified in the Respondent’s request is exempt from disclosure in accordance with §24-72-204, C.R.S., and shall inform the Respondent in writing of his or her determination. If the Respondent does not agree with the determination, the Respondent may protest the determination in accordance with article 109 of the Colorado

Procurement Code and the terms of this solicitation. Reference

Procurement Rule R-24-101-401-03.