RFP_26 PRO - 0024 - S - Enterprise Automated Digital Forensics & Incident Response (DFIR).pdf

i

RFP – Rev. 05/13/2019- Office of General Counsel

MORGAN STATE UNIVERSITY™

REQUEST FOR PROPOSALS

FOR

Project Name: Enterprise Automated Digital Forensics & Incident Response (DFIR)

Project Number: 25/PRO-0016-S

PROSPECTIVE OFFERORS (“OFFERORS’) WHO OBTAINED THIS REQUEST FOR

PROPOSALS (“RFP”) FROM ANY SOURCE OTHER THAN THE DIRECTOR OF

PROCUREMENT OR AN AUTHORIZED DESIGNEE, SHOULD IMMEDIATELY PROVIDE

THEIR NAMES AND EMAIL ADDRESSES TO THE MORGAN STATE UNIVERSITY OFFICE

OF PROCUREMENT AND PROPERTY CONTROL (“ISSUING OFFICE”), TO ENSURE

RECEIPT OF ADDENDA AND OTHER COMMUNICATIONS REGARDING THE RFP.

Morgan State University Office of Procurement and Property Control

Hoen Lithograph Building 2101 E. Biddle Street

Suite 1202 Baltimore, MD 21213

(443) 885-3074

NOTE:

This is a Small Business Reserve Procurement for which the award will be limited to certified business contractors. Only Businesses that meet the statutory requirements set forth in State

Finance and Procurement Article, §§14-501, Annotated Code of Maryland, and who are registered with the Department of General Services Small Business Reserve Program are eligible for award of a contract.

https://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&ved=2ahUKEwjXxvzEz7HhAhVqm-AKHWNxB2kQjRx6BAgBEAU&url=https://www.youtube.com/channel/UCg4C8vRdNi_2zfl4LTeh3yA&psig=AOvVaw1TgN_9k2rqJhfdxbbs7L55&ust=1554301784716349 ii

KEY INFORMATION SUMMARY SHEET

Request for Proposals

Enterprise Automated Digital Forensics & Incident Response (DFIR)

26/PRO-0024-S

RFP Issue Date:

RFP Issuing Office:

Procurement Officer or Procurement Officer’s Representative:

Mailing Address:

Expression of Interest Issue Date:

Closing Date for Receipt of Expressions of Interest:

Pre-Proposal Conference / Site Visit:

Deadline for Questions:

Closing Date and Time:

Oral Presentations (If Applicable):

Contract Type:

Contract Term:

3/26/2026

Morgan State University Office of Procurement and Property Control

Mr. Oluwagbenga Alo

Office Phone: 443-885-3176 E-mail: Oluwagbenga.alo@morgan.edu Fax: 443-885-8368

Hoen Lithograph Building 2101 E. Biddle Street Suite 1202 Baltimore, MD 21213 Attention: Mr. Oluwagbenga Alo

N/A

N/A

N/A

4/2/2026 2 PM EST

4/24/2026 12 PM EST

N/A

Firm Fixed Price

(3) year base with two (2) one-year option periods

Morgan State University is committed to ensuring that persons with disabilities have equally effective opportunities to participate in and benefit from Morgan State University's programs and services. Persons who may require reasonable accommodations pursuant to the Americans with Disabilities Act of 1990 (“ADA”) (42 U.S.C. § 12101 et.

seq.) should contact the RFP Issuing Office at 443-885-3074 at least five (5) days prior to any meeting scheduled in connection with this RFP.

iii

MORGAN STATE UNIVERSITY

NOTICE TO OFFERORS

To help improve the quality of proposal solicitations and to make our procurement process more responsive and "business-friendly," we ask that you provide comments and suggestions regarding the enclosed RFP.

Please return your comments with your proposal or "no proposal" response, as the case may be. Thank you for your assistance.

Proposal Number: 26/PRO-0024-S, Entitled: Enterprise Automated Digital Forensics & Incident Response (DFIR)

I. If you have responded with a "no proposal," please indicate the reasons below:

( ) Other commitments preclude our participation at this time.

( ) The subject of the solicitation is not something we normally provide.

( ) We are inexperienced in the work/commodities required.

( ) The specifications are either unclear or too restrictive (Explain below).

( ) The scope of work is beyond our current capacity.

( ) Doing business with Maryland Government agencies is simply too complicated (Explain below).

( ) We cannot be competitive (Explain below).

( ) The time allotted for completion of the bid/proposal response is insufficient.

( ) Startup time is insufficient.

( ) Bonding/Insurance requirements are prohibitive (Explain below).

( ) Minority Business Enterprise (“MBE”) requirements (Explain below)

( ) Proposal requirements (other than specifications or scope) are unreasonable or too risky (Explain below).

( ) Prior experience with Morgan State University contracts was unprofitable or otherwise unsatisfactory (Explain below).

( ) The payment schedule is too slow.

( ) Other:

II. If you have submitted a proposal, but wish to offer suggestions or express concerns, please use the remarks section below.

Remarks:

Offeror Name:

Contact Person:

Signature: Date:

Address:

E-Mail:

Telephone: Fax:

iv

TABLE OF CONTENTS

COVER PAGE .......................................................................................................................................... i

KEY INFORMATION SUMMARY SHEET………………………………………………………….…..ii

NOTICE TO OFFERORS ..................................................................................................................... iii

SECTION I. INFORMATION FOR OFFERORS

A. SUMMARY STATEMENT

B. ISSUING OFFICE AND PROCUREMENT OFFICER

C. PRE-PROPOSAL CONFERENCE

D. QUESTIONS AND INQUIRIES

E. PROPOSAL DUE DATE

G. PROCUREMENT METHOD

H. BASIS FOR AWARD

I. MULTIPLE OR ALTERNATE PROPOSALS

J. SMALL BUSINESS RESERVE UTILIZATION……….…………………………………………...3

K. EXPRESSIONS OF INTEREST…………………………………………………………………….3

SECTION II. GENERAL INFORMATION FOR OFFERORS

A. PURPOSE

B. ADDENDA TO THE RFP

C. PRE-PROPOSAL MODIFICATION OR WITHDRAWAL OF OFFERS

D. CANCELLATION OF SOLICITATION/REJECTION OF ALL PROPOSALS

E. DISCUSSIONS

F. ORAL PRESENTATIONS

G. INCURRED EXPENSES

H. ARREARAGES

I. VERIFICATION OF REGISTRATION AND TAX PAYMENT

J. PREPARATION OF PROPOSALS

K. PUBLIC INFORMATION ACT NOTICE

L. EXECUTION OF PROPOSALS

M. DISCREPANCIES, EXPLANATIONS AND CLARIFICATIONS

N. ORDER OF PRECEDENCE

O. REQUIRED CONTRACT PROVISIONS

P. OFFEROR RESPONSIBILITIES

Q. FALSIFICATION/CONCEALMENT OF MATERIAL FACTS/COLLUSION

v

R. PAYMENT TO THE CONTRACTOR; TAXES

S. NEWS/PRESS RELEASES

T. RECIPROCAL PREFERENCE

U. VENDOR ELECTRONIC FUNDS TRANSFER REGISTRATION

V. PARKING/TRAFFIC……………………………………………………………………………….8

W. DRUGS AND ALCOHOL……………………………………………………………………….…8

X. GOOD FAITH………………………………………………………………………………………9

Y. PROTESTS………………………………………………………………………………………

Z. DEBRIEFING OF UNSUCCESSFUL OFFERORS………………………..…………………...…..9

SECTION III. EVALUATION PROCEDURE

A. EVALUATION COMMITTEE

B. PROPOSAL EVALUATION

C. TECHNICAL EVALUATION

D. FINANCIAL EVALUATION

E. DISCUSSIONS - BEST AND FINAL OFFERS

F. EVALUATION CRITERIA

G. FINAL RANKING AND SELECTION

SECTION IV. INFORMATION REQUIRED IN ALL PROPOSALS

A. ORGANIZATION OF PROPOSAL SUBMISSION

B. TRANSMITTAL LETTER

C. TECHNICAL PROPOSAL

D. TECHNICAL PROPOSAL CONTENTS

E. PRICE PROPOSAL

F. REQUIRED ATTACHMENTS

SECTION V. SCOPE OF SERVICES……

A. BACKGROUND

B. SCOPE OF WORK

C. TERM OF CONTRACT

D. PERFORMANCE PERIOD AND ACCEPTANCE

SECTION VI. APPENDICES…………………

Enterprise Automated Digital Forensics & Incident Response (DFIR) - 26/PRO-0024-S Page 1 RFP – Rev. 05/13/2019 Office of General Counsel

SECTION I. INFORMATION FOR OFFERORS

This RFP is governed by Morgan State University’s Procurement Policies and Procedures approved by the Board of Public Works on September 21, 2005, and the Board of Public Works on September 21, 2005.

A. SUMMARY STATEMENT

Morgan State University (“the University” or “Morgan”), an agency and instrumentality of the State of Maryland, located at 1700 East Cold Spring Lane, Baltimore, Maryland 21251, is a historically Black institution with the unique designation as Maryland’s preeminent public urban research university. Governed by a Board of Regents, Morgan is independent of the University of Maryland System. Currently, the University enrolls approximately 10,000 students and employs over 2,600 individuals. Offering degree programs from the baccalaureate through the doctorate, Morgan has a comprehensive mission that encompasses instruction, research, and public service.

This RFP is intended to provide Offerors with sufficient information to prepare and submit proposals for consideration (“Proposals”) to Morgan in order to provide the Enterprise Automated Digital Forensics & Incident Response (DFIR). In addition, this RFP will provide Offerors an opportunity to present their qualifications, experience, and conceptual approach to providing the requested Enterprise Automated Digital Forensics & Incident Response (DFIR) described herein.

This RFP is subject to all applicable laws and regulations, as well as any applicable Morgan State University policies and procedures.

B. ISSUING OFFICE AND PROCUREMENT OFFICER

The sole point of contact for purposes of this RFP is the Director of Procurement or an authorized designee (hereinafter referred to as Procurement Officer) noted on the Key Information Summary Sheet (Page ii). Only the information communicated by the Procurement Officer shall be deemed the official position of the University; no other State or University employee, official, or representative has authority to change the requirements of this solicitation. Attempts by an Offeror to contact members of the evaluation committee for this RFP (“Evaluation Committee”) or otherwise circumvent this procedure in any manner may be grounds for disqualification of the Offeror from the procurement process.

C. PRE-PROPOSAL CONFERENCE

N/A

D. QUESTIONS AND INQUIRIES

Offerors shall direct all communications regarding this solicitation to the Procurement Officer.

Submit questions to the Procurement Officer, in writing (email preferred) not later than the date indicated on the Key Information Summary Sheet (Page ii). Addenda, if required, will be furnished to all potential Offerors known to have received the RFP.

E. PROPOSAL DUE DATE

Morgan State University Page 2 Enterprise Automated Digital Forensics & Incident Response (DFIR) - 26/PRO-0024-S RFP – Rev. 05/13/2019 Office of General Counsel

Proposals must be received at the Issuing Office by the time and date indicated in the Key Information Summary Sheet (Page ii). Any Proposal, request for withdrawal, or modification of a proposal that is not received at the Issuing Office by the designated time and date indicated will be considered late and will not be considered.

Proposals must arrive via hard copy to the Procurement Officer identified in the Key Information Summary Sheet by April 24, 2026, 12 PM (EST) to be considered.

Offerors shall allow sufficient delivery time for transit to the Procurement Officer issuing the solicitation. Submissions shall clearly denote the Project Number, Project Title, Due Date & Time.

Delivery of the Proposal to the specified location at the prescribed time and date is the sole responsibility of the Offeror. Requests for extensions will not be granted, nor will late requests for modification or late requests for withdrawal be considered.

At the sole discretion of the Procurement Officer, exceptions may be made only when the University’s reason for receipt of a late Proposal, Proposal withdrawal request, or Proposal modification request is due to the action or inaction of the Procurement Officer.

F. DURATION OF PROPOSAL OFFER

Proposals submitted in response to this RFP are irrevocable for ninety (90) days following the closing date for proposals or, if requested by the Procurement Officer, the due date for best and final offers (“BAFO”).

G. PROCUREMENT METHOD

This solicitation shall be conducted in accordance with all applicable laws and regulations, as well as the Morgan State University Procurement Policies and Procedures (Approved by the Morgan State University Board of Regents on January 11, 2005 and Approved by the Board of Public Works on September 21, 2005 (MSU Item 1-GM)). The procurement method is “Best Value, Competitive Sealed Proposals”.

H. BASIS FOR AWARD

1. The Procurement Officer may classify Proposals as: (i) Reasonably susceptible of being selected for award; or (ii) Not reasonably susceptible of being selected for award.

2. Offerors judged by the Procurement Officer as not responsible or Proposals not reasonably susceptible of being selected for award shall be so classified and the Offeror(s) so notified.

3. Proposals will be evaluated by an evaluation committee. Award shall be made to the responsible Offeror whose overall technical and financial proposal was evaluated as best meeting the needs of the University as set forth in the RFP. The University may make multiple awards if it is deemed to be in the best interest of the University, and if provided for in the solicitation.

4. The University shall provide public notice of awards.

Morgan State University Page 3

RFP – Rev. 05/13/2019 Office of General Counsel

I MULTIPLE OR ALTERNATE PROPOSALS

Multiple or alternate Proposals will not be accepted.

J. SMALL BUSINESS RESERVE UTILIZATION

This is a Small Business Reserve Procurement for which the award will be limited to certified business contractors. Only Businesses that meet the statutory requirements set forth in the State Finance and Procurement Article, §§14-501, Annotated Code of Maryland, and that are registered with the Department of General Services Small Business Reserve Program are eligible for award of a contract.

K. EXPRESSIONS OF INTEREST (N/A)

Enterprise Automated Digital Forensics & Incident Response (DFIR) - 26/PRO-0024-S Page 4

SECTION II. GENERAL INFORMATION FOR OFFERORS

A. PURPOSE

The purpose of this solicitation is to provide information to Offerors interested in preparing and submitting proposals to meet the requirements contained herein. Offerors shall familiarize themselves with each section and subsection of this document.

B. ADDENDA TO THE RFP

The University reserves the right to amend this solicitation at any time prior to the proposal due date. If any amendments or addenda are required, the Procurement Officer shall send a copy of the amendments to all potential Offerors that are known to have received a copy of the solicitation. All amendments shall include a statement to the effect that Offerors are required to acknowledge receipt of any amendments to the request for proposals. If appropriate, the due date shall be adjusted to ensure that sufficient time is given to prospective Offerors to consider the information contained in the amendment for preparation of their responses.

C. PRE-PROPOSAL MODIFICATION OR WITHDRAWAL OF OFFERS

Proposals may be modified or withdrawn by written notice received at the Issuing Office at any time before the proposal due date and time. Any request for withdrawal or modification of a Proposal that is not received at the Issuing Office by the designated time and date indicated will be considered late and will not be considered.

At the sole discretion of the Procurement Officer, exceptions may be made only when the University’s reason for receipt of a late request for withdrawal or modification is due to the action or inaction of the Procurement Officer.

D. CANCELLATION OF SOLICITATION/REJECTION OF ALL PROPOSALS

The University reserves the right to cancel this RFP, to accept or reject any or all proposals, in whole or in part, received in response to this RFP, and to waive or permit cure of minor irregularities as its best interests may require.

E. DISCUSSIONS

At the sole discretion of the Procurement Officer, discussions may be held. Offerors shall be treated fairly and equally with respect to any opportunity for discussions and clarifications. During discussions, the Procurement Officer shall not disclose or permit to be disclosed any information from a competing proposal or advise an Offeror of its standing relative to another Offeror. The Procurement Officer also reserves the right to award a contract based upon written proposals received, without discussions or negotiations.

F. ORAL PRESENTATIONS

Morgan State University Page 5

RFP – Rev. 05/13/2019 Office of General Counsel

Offerors may be required to make oral presentations to university representatives. If necessary, the Procurement Office will provide notice of the time and place for presentations.

G. INCURRED EXPENSES

The University assumes no responsibility for expenses incurred by the Offeror in preparing and submitting a Proposal, making an oral presentation, or participating in discussions or any other activity in response to this RFP.

H. ARREARAGES

By submitting a response to this RFP, each Offeror shall be deemed to represent that it is not in arrears in the payment of any obligation due and owing the State of Maryland, including the payment of taxes and employee benefits, and that it shall not become so in arrears during the term of the contract if selected for contract award.

I VERIFICATION OF REGISTRATION AND TAX PAYMENT

Each Offeror ensures that it is appropriately registered to do business in the State of Maryland and in good standing with respect to taxes, personal property returns, unemployment insurance, etc., before the closing date. Failure to complete registration with the State Department of Assessments and Taxation (SDAT) may disqualify an otherwise successful Offeror from recommendation for contract award.

J. PREPARATION OF PROPOSALS

Proposals should be prepared simply and economically, providing a straight-forward, concise description of the Offeror's ability to fulfill the requirements of this solicitation. Proposals are to be submitted in sealed envelopes and clearly identified.

K. PUBLIC INFORMATION ACT NOTICE

Offerors should give specific attention to identification of those portions of the proposals that they deem to be confidential, proprietary information or trade secrets and provide any justification why such materials, upon request, should not be disclosed by the State under the Public Information Act, Title 4, Subtitle 3 of the Government General Provisions Article, Annotated Code of Maryland.

L. EXECUTION OF PROPOSALS

Proposals shall be typewritten or written legibly in ink, and signed in ink as follows, depending on the Offeror's form of business organization:

1. Sole Proprietorship. The proprietor shall sign their full name, with address.

2. Partnership and Joint Venture. Submit the proposal in the name of the partnership or joint venture. Clearly state the partnership name and the identity of each general partner, and execute all affidavits and certificates on behalf of the partnership, or on behalf of each

Morgan State University Page 6

RFP – Rev. 05/13/2019 Office of General Counsel general partner. No provision of any agreement among partners will be binding on the University unless it is disclosed in the Offeror’s proposal. Reasonable evidence satisfactory to the University of the authority of one partner to bind other purported partners is required. It is recommended that the proposal contain a copy of the partnership agreement, if one exists. If no partnership agreement exists, and if the number of general partners is reasonably small, each general partner should execute all required documents included in the proposal. At the University's option, all general partners may be required to sign the proposal. Failure to present the University with satisfactory information concerning a purported partnership or joint venture may be grounds for finding a proposal unacceptable.

3. Corporation. An officer or authorized agent of the corporation shall sign with their full name, indicate their title, and include the name and address of the corporation. In the case of an authorized agent, enclose a letter from an officer of the corporation authorizing said individual to act on behalf of the corporation.

M. DISCREPANCIES, EXPLANATIONS, AND CLARIFICATIONS

Should an Offeror find discrepancies in the specifications or other provisions included in this solicitation, or be in doubt as to the meaning or intent of any section or subsection herein, the Offeror shall request clarification from the Procurement Officer. Failure to request clarification prior to the due date shall be a waiver of any claim by the Offeror for expenses made necessary by reason of later interpretation of the contract documents, and the Offeror shall be bound to the University's interpretation. Request clarifications in accordance with the instructions above in Section I. (D) of this RFP.

N. ORDER OF PRECEDENCE

The contract to be entered into as a result of the RFP ("Contract") will consist of the following

Contract Documents, listed in their order of precedence:

1. The Morgan State University Contract;

2. This RFP, including any of its exhibits/attachments;

3. The Offeror's Proposal; and

4. Any other supporting documentation.

No modifications to this order of precedence will be accepted.

O. REQUIRED CONTRACT PROVISIONS

All proposals submitted and the contracts executed by the successful Offeror(s) are subject to the applicable Morgan State University Terms and Conditions attached hereto in the Appendices.

By submitting a Proposal in response to this solicitation, the Offeror, if selected for award, shall be deemed to have agreed to and accepted all contract terms and conditions set forth in the Morgan State University Contract, which is incorporated by reference.

P. OFFEROR RESPONSIBILITIES

Morgan State University Page 7

RFP – Rev. 05/13/2019 Office of General Counsel

The successful Offeror shall be responsible for all products and services required by this RFP.

Subcontractors, if any, must be identified and a complete description of their role relative to the project must be identified.

Q. FALSIFICATION/CONCEALMENT OF MATERIAL FACTS/COLLUSION

Offerors are advised that pursuant to Section 11-205(b) of the State Finance and Procurement

Article of the Annotated Code of Maryland (MD. State Fin. & Pro. Code § 11-205(b)), a person who, for the purpose of defrauding the State, acts in collusion with another person in connection with the procurement process is liable for damages equal to three (3) times the value of the loss to the State that is attributable to the collusion.

In addition, Offerors are advised that Section 11-205.1 of the State Finance and Procurement Article of the Annotated Code of Maryland (MD. State Fin. & Pro. Code § 11-205.1) provides as follows:

(a) In general. -- In connection with a procurement contract, a person may not willfully:

(1) falsify, conceal, or suppress a material fact by any scheme or device;

(2) make a false or fraudulent statement or representation of a material fact; or

(3) use a false writing or document that contains a false or fraudulent statement or entry of a material fact.

(b) Aiding or conspiring with others. -- A person may not aid or conspire with another person to commit an act under subsection (a) of this section.

(c) Penalty. -- A person who violates any provision of this section is guilty of a felony and, on conviction, is subject to a fine not exceeding $ 20,000 or imprisonment not exceeding five (5) years or both.

R. PAYMENT TO THE CONTRACTOR; TAXES

Payment is governed by Title 15, Subtitle 1 of the State Finance and Procurement Article, Annotated

Code of Maryland. The State of Maryland is exempt from Maryland Retail Sales Tax and Federal Excise Tax.

S. NEWS/PRESS RELEASES

The successful Offeror shall issue no press release to any publication, including newspapers, with regard to work being conducted under this contract. The University is the only entity that may issue or authorize the issuance of any news or press releases to this RFP, its evaluation, award of any contract, and performance thereunder relating. Each Offeror further agrees that any commercial advertising resulting from a contract must receive prior approval from the University.

T. RECIPROCAL PREFERENCE

1. Offerors, who are non-Maryland residents, submitting a Proposal for this solicitation shall include in its Proposal a copy of the current statute, resolution, policy, procedure, or executive order

Morgan State University Page 8

RFP – Rev. 05/13/2019 Office of General Counsel of the resident state for the non-Maryland resident Offeror that pertains to that state's treatment of non-Maryland resident Offerors.

2. Although Maryland law does not authorize procuring agencies to favor resident bidders in awarding procurement contracts, many other states do grant their resident businesses preference over Maryland contractors. Therefore, the University may apply, where applicable, the same preference against an out-of-state business that the business's home state, or state in which its principal office or base of business is located, or principal location from which the services required under this RFP would be provided, would apply against a Offeror whose principal office or base of business is located in Maryland.

U. VENDOR ELECTRONIC FUNDS TRANSFER REGISTRATION

Contractors of the State are required to complete a COT/GAD Form X-10, Vendor Electronic

Funds Transfer (EFT) Registration Request Form, attached hereto in the Appendices, for each new contract with a value greater than $200,000. Vendors must register for EFT by submitting a completed COT/GAD Form X-10 to the Maryland State Comptroller’s General Accounting Division (GAD) or request an exemption from GAD.

Additionally, by submitting a response to this solicitation, the Offeror agrees to accept payments by electronic funds transfer unless GAD grants an exemption. Any request for exemption must be submitted to GAD for approval at the address specified on the COT/GAD Form X-10, Vendor Electronic Funds Transfer (EFT) Registration Request Form and must include the business identification information as stated on the form and include the reason for the exemption.

V. PARKING/TRAFFIC

All vehicles on Morgan State University property must strictly observe Morgan’s Parking & Traffic

Regulations at all times. All fines and penalties related to parking, traffic, or other vehicle violations are the responsibility of the contractor. This applies to vendors, salespersons, company vehicles, and contractor employees’ personal vehicles. Morgan State University’s Parking & Traffic Regulations can be found at:

https://www.morgan.edu/Documents/ADMINISTRATION/OFFICES/parking/ParkingRules_201 9-20.pdf

W. DRUGS AND ALCOHOL

This RFP is subject to the provisions of the Morgan State University Drug and Alcohol Abuse Policy

(Board of Regents Approved, May 4, 2010). Offerors shall submit with its Proposal a certification concerning a drug and alcohol-free workplace. Morgan State University is dedicated to providing a campus environment free of the illegal and/or abusive use of alcohol and/or drugs. The illegal and/or abusive use of drugs and/or alcohol by members of the campus community jeopardizes the safety of the individual and the campus community and is contrary to the academic learning process. Morgan State University is therefore committed to having a campus that is free of the illegal and/or abusive use of drugs and alcohol. In keeping with this commitment, it is the policy of the University that the illegal and/or abusive use of drugs or alcohol is prohibited on University property or as part of University activities. Further, the possession and/or consumption of alcoholic beverages is prohibited on University premises, except as expressly permitted in writing by the https://www.morgan.edu/Documents/ADMINISTRATION/OFFICES/parking/ParkingRules_2019-20.pdf https://www.morgan.edu/Documents/ADMINISTRATION/OFFICES/parking/ParkingRules_2019-20.pdf

Morgan State University Page 9

RFP – Rev. 05/13/2019 Office of General Counsel

President or designee. Morgan State University's Drug and Alcohol Abuse Policy can be found at:

https://www.morgan.edu/board-of-regents/policies-and-procedures

X GOOD FAITH

Offerors agree to deal in good faith with the University during the solicitation process and, if selected, during the performance of the contract. In determining an Offeror’s responsibility, the Procurement Officer may consider whether the Offeror has dealt in good faith with Morgan or any other agency of the State of Maryland in the past.

Y. PROTESTS

An Offeror may protest the proposed award or the award of a contract for this procurement. Any protest must be filed in accordance with Section X, Protests and Claims, of the Morgan State University Procurement Policies and Procedures, approved by the Morgan State University Board of Regents on January 11, 2005.

Z. DEBRIEFING OF UNSUCCESSFUL OFFERORS

Unsuccessful Offerors may request a debriefing. If the Offeror chooses to do so, the request must be submitted in writing to the Procurement Officer within ten (10) days after the Offeror knew or should have known its Proposal was unsuccessful. Debriefings shall be limited to discussion of the specific Offeror's proposal only and shall not include a discussion of a competing offer's proposal.

Debriefings shall be conducted at the earliest feasible time.

SECTION III. EVALUATION PROCEDURE

A. EVALUATION COMMITTEE

All Proposals received by the closing deadline will be evaluated by an evaluation committee.

Technical and price proposals will be evaluated independently. Evaluation shall be based on the factors set forth in this RFP in order to determine which proposal best meets the needs of the University.

B. PROPOSAL EVALUATION

Proposals shall initially be classified by the Procurement Officer as either reasonably susceptible of being selected for award or not reasonably susceptible of being selected for award. Failure to comply with solicitation requirements may result in a proposal being classified as not reasonably susceptible of being selected for award. Minor irregularities in proposals that are immaterial or inconsequential in nature may be cured or waived whenever it is determined to be in the University's best interest.

C. TECHNICAL EVALUATION

1. For Proposals determined to be reasonably susceptible of being selected for award, the evaluation committee will assess and rank the technical merit of each proposal in accordance with the criteria below.

https://www.morgan.edu/board-of-regents/policies-and-procedures

Morgan State University Page 10

2. At the discretion of the Procurement Officer, following recommendation by the evaluation committee, a shortlist of qualified proposals may be established during the technical evaluation. Only shortlisted Offerors would continue in the evaluation process; Offerors not short-listed shall be so advised.

D. FINANCIAL EVALUATION

Price proposals will be evaluated separately from Technical Proposals.

E. DISCUSSIONS - BEST AND FINAL OFFERS

1. The Procurement Officer, at the Procurement Officer’s sole discretion, may invite one or more qualified Offerors for oral presentations of their Proposals and/or hold discussions with qualified Offerors. The Procurement Officer reserves the right to make an award without discussions or negotiations.

2. When in the best interest of the University, the Procurement Officer may request that qualified Offerors to revise their initial proposals by submitting best and final offers.

F. EVALUATION CRITERIA

Evaluation of Proposals will be performed in accordance with a committee established for that purpose and based on the evaluation criteria set forth below. The Evaluation Committee will review Proposals, participate in Offeror’s oral presentations and discussions, and provide input to the Procurement Officer. The Procurement Officer reserves the right to utilize advisors outside of the established Evaluation Committee for device and assistance, as deemed appropriate. During the evaluation process, the Procurement Officer may determine at any time that a particular Offeror is not susceptible for award.

TECHNICAL PROPOSAL EVALUATION CRITERIA

The criteria to be used to evaluate each Technical Proposal are listed below in descending order of importance.

TECHNICAL APPROACH

Offerors shall provide the following:

a. The Offeror shall submit a written narrative describing the benefits that will accrue to the University as a direct or indirect result of the Offeror’s specific proposal for the potential contract. The Offeror must outline the approach that will be followed in providing the requested services and requirements per Section V of this RFP.

Morgan will evaluate the Offeror’s technical approach to determine whether it demonstrates a substantive understanding of the scope, complexity, and requirements associated with the objectives described in the Scope of Work Section V (“SOW”). Morgan will evaluate the Offeror’s proposal to determine whether the Offeror’s approach demonstrates a clear understanding of, and a clear plan to achieve all objectives outlined in the SOW.

Morgan State University Page 11

RFP – Rev. 05/13/2019 Office of General Counsel

MANAGEMENT APPROACH

b. The Offeror will be evaluated to determine whether the Offeror demonstrated the ability to manage all aspects of the proposed efforts, including technical performance, time and delivery constraints, cost, status reporting, and subcontractor(s). The Offeror will be evaluated to determine whether the Offeror demonstrated that they possess appropriate and sufficient management oversight for the overall organization that addresses the planning, initiation, implementation, conduct, monitoring and quality control to achieve the objectives outlined in the SOW to include Offeror’s management, coordination, and oversight of the work performed by consultants and/or subcontractor(s).

The Offeror will be evaluated to determine whether the Offeror demonstrated resources (including subcontractors, consultants, and teaming arrangements) that will be available to perform the potential range of task orders to meet the objectives outlined in the SOW.

PAST PERFORMANCE

c. Offeror Experience on Similar or Relevant Projects. The offeror must have a proven record/prior experience managing at least three (3) Enterprise Automated Digital Forensics & Incident Response (DFIR). The successful Offeror must be prepared to list each reference and provide a short narrative for each project. Offerors must have a complete understanding of the Enterprise Automated Digital Forensics & Incident Response (DFIR) in its respective industry and requisite expertise with respect to any applicable regulations issued by the Department of Information Technology (DoIT) that are published in the Federal Register and compiled in the U.S. Code of Federal Regulations. The regulations issued by COMAR may be accessed at:

https://marylandpublicschools.org/about/Pages/Regulations/COMAR.aspx. Offerors must be able to demonstrate, through references and supporting documentation, that consistent professional and efficient services can be provided to support the day-to-day operational needs outlined in this solicitation.

FINANCIAL PROPOSAL EVALUATION CRITERIA

All Qualified Offerors will be ranked from the lowest (most advantageous) to the highest (least advantageous) price based on the Total Proposal Price within the stated guidelines set forth in this RFP and as submitted on Attachment B - Financial Proposal Form.

Selection Procedures

General

A. The Contract will be awarded in accordance with the Competitive Sealed Proposals (CSP) method found in Morgan State University Procurement Policy and Procedures, approved by the Morgan State University Board of Regents on January 11, 2005. The CSP method allows for the conducting of discussions and the revision of Proposals during these discussions. Therefore, the University may conduct discussions with all Offerors that have submitted Proposals that are determined to be reasonably susceptible of being selected for contract award or potentially so. However, the State reserves the right to make an award without holding discussions.

https://marylandpublicschools.org/about/Pages/Regulations/COMAR.aspx

Morgan State University Page 12

RFP – Rev. 05/13/2019 Office of General Counsel

B. With or without discussions, the Procurement Officer may determine the Offeror to be not responsible or the Offeror’s Proposal to be not reasonably susceptible of being selected for award at any time after the initial closing date for receipt of Proposals and prior to Contract award.

Selection Process Sequence

A. Technical Proposals are evaluated for technical merit and ranked. During this review, oral presentations and discussions may be held. The purpose of such discussions will be to assure a full understanding of the University’s requirements and the Offeror’s ability to perform the services, as well as to facilitate the arrival at a Contract that is most advantageous to the University. Offerors will be contacted by the University as soon as any discussions are scheduled.

B. Offerors must confirm in writing any substantive oral clarifications of, or changes in, their Technical Proposals made in the course of discussions. Any such written clarifications or changes then become part of the Offeror’s Technical Proposal.

Technical Proposals are given a final review and ranked.

C. The Financial Proposal of each Qualified Offeror (a responsible Offeror determined to have submitted an acceptable Proposal) will be evaluated and ranked separately from the Technical evaluation. After a review of the Financial Proposals of Qualified Offerors, the Evaluation Committee or Procurement Officer may again conduct discussions to further evaluate the Offeror’s entire Proposal.

D. When in the best interest of the University, the Procurement Officer may permit Qualified Offerors to revise their initial Proposals and resubmit, in writing, Best and Final Offers (BAFOs). The University may make an award without issuing a request for a BAFO.

G. FINAL RANKING AND SELECTION

Following evaluation of the technical and price proposals, the evaluation committee will recommend to the Procurement Officer an award to the responsible Offeror whose Proposal is determined to be the most advantageous to the University.

SECTION IV. INFORMATION REQUIRED IN ALL PROPOSALS

A. ORGANIZATION OF PROPOSAL SUBMISSION

1. Two-Volume Submission. Submit the Proposal in sealed envelopes or packages, with the RFP number, due date, and the Offeror's name on the outside of each package or envelope.

2. The technical proposal shall be sealed separately from the financial proposal but submitted simultaneously. Submit one (1) original, so identified, and 1 copy of each volume; each shall be page numbered beginning with “1.”

3. Enclose one (1) electronic version of the technical proposal in MS Word or .pdf format, Morgan State University Page 13

RFP – Rev. 05/13/2019 Office of General Counsel and the Financial Proposal in MS Excel or .pdf format, in the original technical and financial volumes, respectively.

4. If product literature and other publications are needed to supplement Offeror’s response, include a reference to the document name and page in text, and insert the product literature, etc. following the last section of the response.

B. TRANSMITTAL LETTER

Each technical proposal shall be covered by a transmittal letter, prepared on the Offeror’s business stationery, signed by an individual who is authorized to bind the firm to all statements, proposed services, and prices offered. Do not include price information in the transmittal letter.

C. TECHNICAL PROPOSAL

1. Submit the technical proposal in a sealed envelope or package separate and apart from the financial proposal. Ensure that it is page-numbered and prepared in a clear and concise manner that addresses each part of the RFP. Do not include price information in the technical proposal.

2. Organize the technical proposal in the same sequence as Section V of this RFP, and address each separate item herein, confirming compliance and describing in detail how the Offeror proposes to meet or exceed each requirement.

D. TECHNICAL PROPOSAL CONTENTS

In addition to any necessary information or documents referred to in this RFP, completed responses should also include the following information.

1. Executive Summary. A brief synopsis that demonstrates the Offeror’s understanding of the

University’s requirements, highlighting the Offeror’s proposed solution,

2. Key Personnel. Provide the names of key Offeror personnel proposed for the University’s project, if awarded, emphasizing specific experience on contracts similar in scope and volume to the requirements of this RFP. Note: Offeror shall submit the names for personnel reasonably expected by the Offeror to be committed to the University for the duration of the project.

3. Company Profile. Provide the organizational structure of your company; include names, contact information, bios and responsibilities for the proposed services. Noting the website, if any, to be consulted for additional company information.

4. Subcontractors. List each subcontractor proposed for the University’s contract, with a complete description of its role and involvement.

5. Offeror Experience on Similar or Relevant Projects. Identify and describe any comparable projects previously undertaken by Offeror. Identify the similarities and differences between projects completed and the proposed project.

Morgan State University Page 14

RFP – Rev. 05/13/2019 Office of General Counsel

6. References. Furnish reference data for not less than three (3) comparable projects currently underway or completed, including the name and telephone number of the project manager and/or procurement officer for each. The University reserves the right to make such investigations as it deems necessary to confirm the responsibility of the Offeror.

7. Perceived Benefits. Submit a narrative describing the benefits that will accrue to the

University as a direct or indirect result of the Offeror’s specific Proposal for the potential contract.

8. Approach. The Offeror must outline the approach that will be followed in providing the requested services. Also, the respondent should discuss important issues that the University should be aware of in facilitating the insurance deemed necessary for each for a particular event.

9. Participation of Small, Women-Owned, and Minority Businesses. Offerors must provide a list of all MBEs to be used in the performance of the potential contract. Offerors are encouraged to use a diverse group of subcontractors and suppliers from any/all of the various MBE classifications to meet any MBE participation goals.

The University reserves the right to request Offerors to furnish its most recent annual financial statements or other financial reports to confirm financial capacity and stability.

E. PRICE PROPOSAL

1. Use the price proposal form, attached hereto in the Appendices, to submit the prices and rates. Submit the price proposal separately, sealed and apart from the technical proposal.

2. Include on the price proposal form any charges that may be applicable to the work, but have not been requested. All prices and rates offered shall be firm for the initial contract term.

F. REQUIRED ATTACHMENTS

The required attachments (as applicable) found in the Appendices must be completed and submitted with each Proposal.

SECTION V. SCOPE OF SERVICES

A. BACKGROUND

As the University's digital footprint expands, traditional manual forensic collection is no longer scalable. The institution requires a solution that integrates with existing security orchestration to provide "speed-to-evidence," allowing the security team to capture volatile memory and disk artifacts across the network in minutes rather than days.

OBJECTIVES

Automate Forensic Collection: Eliminate manual imaging of drives by utilizing remote, Morgan State University Page 15

RFP – Rev. 05/13/2019 Office of General Counsel lightning-fast collection of forensic artifacts.

Enhance Incident Response: Reduce the time between alert detection and root-cause analysis.

Ensure Chain of Custody: Implement a forensically sound process that preserves metadata and ensures evidence integrity for potential legal or regulatory proceedings.

Interoperability: Ensure the forensic capability integrates via API with existing SIEM/EDR/XDR platforms for automated triggering.

SCOPE OF WORK

Task 1: Remote Forensic Acquisition Architecture: Design a system capable of performing remote, automated acquisition of volatile and non-volatile data from Windows, macOS, and Linux endpoints.

Task 2: Automated Triggering & Integration: Configure the solution to automatically initiate forensic collection based on high-severity alerts from the University’s Security Operations Center

(SOC).

Task 3: Evidence Management & Preservation: Establish a centralized, encrypted evidence repository with built-in integrity checking and role-based access control (RBAC).

Task 4: Timeline & Root Cause Analysis Engine: Deploy capabilities to automatically correlate artifacts into a unified timeline for rapid investigator review.

DELIVERABLES

• Deployment of forensic agents/collectors across the enterprise.

• Integrated "Playbooks" for automated forensic triggering.

• Documented Standard Operating Procedures (SOPs) for digital evidence handling.

• Quarterly forensic readiness assessment report.

COMMERCIAL STRUCTURE

• Subscription or License-based model with implementation services.

SUCCESS CRITERIA

• Ability to collect a standard forensic artifact set from any endpoint in under 10 minutes.

• Seamless integration with the existing SOC alert pipeline.

• Validation of "forensically sound" snapshots that pass industry-standard integrity checks.

Morgan State University Page 16

RFP – Rev. 05/13/2019 Office of General Counsel

C. TERM OF CONTRACT

Upon receipt of the notice to proceed, the contract term shall consist of an initial duration of a base of three (3) years, followed by 2 (1) one-year option periods, which shall be exercised at the sole discretion of the University.

D. PERFORMANCE PERIOD AND ACCEPTANCE

The selected contractor shall be paid the contract rate thirty (30) days after receipt of a valid invoice for requested services. Payments are only issued for services rendered. All rates are fixed for the term of the contract. Continuous evaluations will occur during the term of the contract.

APPENDICES [All Required Attachments must be submitted for review]

(Complete and submit the required documents with your proposal)

In the attachments listed below, all capitalized terms used and not otherwise defined shall have the same meanings that were assigned to them in this RFP.

Attachment B Price Proposal Form and Worksheet (Required) with Proposal

Attachment C Proposal Affidavit (Required) with Proposal

Attachment D Conflict of Interest and Disclosure Affidavit (Required) with Proposal

Attachment E Contract Affidavit (Required) with Proposal

Attachment F List of Past Performance References (Required) with Proposal

Attachment G Addendum Acknowledgement Form (Required) with Proposal

Attachment H Terms and Conditions Acknowledgement and Acceptance Notice (Required) with Proposal. Morgan State University Contract Attached for informational purposes only.

Attachment I Proposal Bid/Bond (Must Be Submitted with Proposal Where Applicable)

(Required) with Proposal

Attachment L Vendor Electronic Funds Transfer (EFT) Registration Request Form with

Proposal (Applicable to Solicitation Awardee)

Attachment M E-Maryland Marketplace Registration Verification Form (Required)

Attachment N Campus Map (for informational purposes)

Attachment O Past Performance Questionnaire (Vendor should send the performance questionnaire their references to be completed and sent to the Procurement

Officer via-email. (Required)

Attachment Q Standard Insurance Limits (Required) with Proposal

G. FINAL RANKING AND SELECTION