Beyond Trust Privileged Access Management

The North Carolina Department of Revenue is requesting bids on a turnkey BeyondTrust Privileged Access Management solution with implementation services and training under IFB 45-RQ255223, with sealed offers due July 8, 2026 at 10:00 a.m. Eastern Time via Ariba Sourcing Module. The core capability filter is a BeyondTrust PAM platform supporting 100 licensed seats and 100 concurrent sessions with scalability to 500 sessions.

The solution must include Privileged Remote Access with secure jump/bastion capabilities; cloud, on-premises, or hybrid deployment options; and native connectors for NCID, Microsoft Entra, Active Directory/LDAP, and SIEM tools. Security requirements mandate AES256 encryption for data at rest, TLS 1.2 or higher for data in transit, FIPS 140-2/3 validated cryptographic modules, and tamper-evident session recording with immutable logs retained for a minimum of 12 months. The platform must comply with IRS Publication 1075 and support FedRAMP accounts. Scope includes professional implementation (to be completed within 90 calendar days after purchase order receipt), administrator and end-user training, and three Privileged Access Training for Admin licenses.

The initial contract term is three years, invoiced annually, with two optional one-year renewal periods at the State's discretion. Pricing must be quoted for 12-month periods across all three years of the initial term. A 1.75% transaction fee applies to purchase orders issued through the Statewide E-Procurement Service, payable monthly by the vendor.

Vendors must provide a current independent third-party security assessment (FedRAMP certification, SOC 2 Type 2, ISO 27001, or HITRUST) prior to contract award or within 365 days of the contract effective date if submitting alternative assessments. All personnel must comply with E-Verify requirements and be located in the United States. The platform must meet WCAG 2.1 and Section 508 accessibility standards. Award will be made on Best Value Analysis using the Lowest Price Technically Acceptable Source Selection Method. Written questions are due July 2, 2026 at 5:00 p.m. Eastern Time. No incumbent is identified.