CyberSecurity Monitoring and Detection

Rockland County, New York is seeking a comprehensive cybersecurity service provider through a Best Value Bid Specification for Managed Detection and Response (MDR) services. The procurement, identified as RCO-RC-2025-016, requires a vendor capable of delivering Adlumin MDR services or an approved equivalent, with a focus on 24x7x365 threat monitoring, analysis, escalation, and response capabilities. The solicitation encompasses 300 licenses for the complete MDR service package, 300 licenses for one-year log retention, and 300 incident response engagements. The evaluation will utilize a best value methodology, distributing 1,000 total points across multiple criteria including cost (350 points), technical capability and service coverage (150 points), incident response and containment capabilities (100 points), organizational structure and expertise (100 points), support and maintenance (100 points), implementation and training (100 points), MWBE participation (50 points), and value-added considerations (50 points). Competitive offers must be electronically submitted through the County's BONFIRE Solicitation Submission Portal by 3:00 PM on December 18, 2025, with a $500 solicitation deposit required. The contract term is one year with three optional one-year renewal periods.

The procurement includes provisions for Minority and Women-owned Business Enterprise (MWBE) participation, with 50 points allocated specifically to this criterion. Potential respondents must comply with various federal and state requirements, including Equal Employment Opportunity provisions, Davis-Bacon Act guidelines, and Byrd Anti-Lobbying Amendment certifications for awards exceeding $100,000. Vendors are required to submit a Certificate of Experience documenting relevant cybersecurity monitoring and detection work performed within the last three years, with the ability to provide up to five reference projects. Insurance requirements mandate that the selected vendor provide a current certificate of insurance naming Rockland County as an additional insured within five business days of award notification. While specific budget ranges are not explicitly stated, the comprehensive nature of the procurement suggests a significant investment in cybersecurity infrastructure. Purchases under this contract may be funded wholly or partially with federal funds, necessitating strict compliance with associated federal procurement regulations.