Zero Trust RFQ .pdf

PDF 303 KB Posted

Attached to
Zero Trust and Artificial Intelligence Training
Solicitation number
BPM057689
Issued by
Maryland

About this file

This is a Request for Quotations (RFQ) issued by the Maryland Department of Information Technology (DoIT) for a comprehensive Zero Trust Training and Certification Program. The solicitation, numbered BPM057689, was issued on June 23, 2026, with quotations due by June 26, 2026, at 4:00 PM. The scope of work requires vendors to provide a vendor-neutral training solution aligned with NIST SP 800-207, CISA Zero Trust Maturity Model Version 2.0, and Maryland cybersecurity initiatives. The program must address five Zero Trust pillars: Identity, Device, Network/Environment, Applications & Workloads, and Data. Required deliverables include two virtual instructor-led training classes (up to 25 students per class), twenty self-paced Zero Trust training licenses, ten advanced cybersecurity training licenses, digital course materials, professional certification examination vouchers, and monthly enrollment and completion reports. The training must be delivered through an online Learning Management System with administrative reporting and student progress tracking capabilities. No specific award date or contract term is specified in the solicitation.

Vendors must submit fixed-price quotations including total proposed price, detailed pricing by deliverable, program description, compliance confirmation, and vendor point of contact information. Quotations must remain valid for a minimum of sixty days. Award will be made to the responsible offeror whose quotation is determined most advantageous to the State, evaluated on compliance with requirements, vendor qualifications and experience, and price. Vendors must demonstrate recognition as an independent or industry-recognized cybersecurity training organization, experience delivering Zero Trust training programs, global recognition of offered credentials, and ability to provide administrative dashboards and reporting. Invoices shall be submitted electronically to doitfiscal.invoiceservice@maryland.gov only after completion and acceptance of deliverables, with payment made within thirty days of invoice receipt and service acceptance in accordance with COMAR 21.07.03 and State Finance and Procurement Article 15-104. Questions regarding the solicitation should be directed to Procurement Officer Merchelle Halsey at merchelle.halsey@maryland.gov or 410-697-9694.

View the file

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

STATE OF MARYLAND

DEPARTMENT OF INFORMATION TECHNOLOGY (DoIT)

CATEGORY III SMALL PROCUREMENT REQUEST FOR QUOTATIONS (RFQ)

Solicitation Number: BPM057689 Issue Date: June 23, 2026 Due Date: June 26, 2026 Time: 4:00 PM

1. PURPOSE

The Maryland Department of Information Technology (DoIT) is requesting quotations from qualified vendors to provide a comprehensive, vendor-neutral Zero Trust (ZT) Training and

Certification Program for State personnel.

This procurement is being conducted as a Category III Small Procurement in accordance with

State Finance and Procurement Article, Title 13, Annotated Code of Maryland, and COMAR

21.05.07.

2. SCOPE OF WORK

The Contractor shall provide a comprehensive Zero Trust training and certification solution that establishes a standardized baseline of knowledge for State agencies in support of Zero Trust

Architecture (ZTA) implementation.

The training program shall:

1. Align with:

o NIST SP 800-207, Zero Trust Architecture;

o CISA Zero Trust Maturity Model (ZTMM) Version 2.0; and o Maryland cybersecurity initiatives and applicable State mandates.

2. Include training content addressing the five Zero Trust pillars:

o Identity o Device o Network/Environment o Applications & Workloads o Data

3. Be delivered through an online Learning Management System (LMS) capable of providing administrative reporting and student progress tracking.

3. REQUIRED DELIVERABLES

The Contractor shall provide, at a minimum:

Deliverable Estimated Quantity

Virtual Instructor-Led Training Classes (up to 25 students/class) Two (2)

Self-Paced Zero Trust Training Licenses Twenty (20)

Self-Paced Advanced Cybersecurity Training Licenses Ten (10)

Digital course materials and study guides Included

Professional certification examination vouchers Included

Monthly enrollment and completion reports Monthly

4. VENDOR QUALIFICATIONS

Offerors shall demonstrate:

• Recognition as an independent or industry-recognized cybersecurity training organization;

• Experience delivering Zero Trust training and certification programs;

• Global recognition of the certification credential(s) offered; and

• Ability to provide administrative dashboards and reporting capabilities.

5. QUOTATION SUBMISSION

Vendors shall submit a fixed-price quotation that includes:

1. Total proposed price;

2. Detailed pricing by deliverable;

3. Description of proposed training and certification program;

4. Confirmation of compliance with all requirements; and

5. Name, title, email address, and telephone number of the vendor point of contact.

Quotations shall remain valid for a minimum of sixty (60) days.

6. EVALUATION CRITERIA

Award shall be made to the responsible Offeror whose quotation is determined to be the most advantageous to the State, considering:

• Compliance with all requirements;

• Vendor qualifications and experience; and

• Price.

The State reserves the right to request clarification of quotations and to award without discussions.

7. INVOICING AND PAYMENT

The Contractor shall submit invoices only after completion and acceptance of deliverables by the State.

Invoices shall include, at a minimum:

• Contractor name and address;

• Invoice date and invoice number;

• State Purchase Order number;

• Description of services provided;

• Applicable service period;

• Quantity and unit price, if applicable; and

• Total amount due.

Invoices shall be submitted electronically to:

Department of Information Technology at

Email: doitfiscal.invoiceservice@maryland.gov

Payment shall be made in accordance with the provisions of COMAR 21.07.03 and State Finance and Procurement Article, §15-104, Annotated Code of Maryland. The State shall pay approved invoices within thirty (30) days after receipt of a proper invoice and acceptance of services.

8. PROCUREMENT OFFICER

Questions regarding this solicitation shall be submitted in writing to:

mailto:doitfiscal.invoiceservice@maryland.gov

Procurement Officer: Merchelle Halsey

Department of Information Technology Email: merchelle.halsey@maryland.gov Phone: 410-6977-9694

File details come from the government source that posted it. Updated .