DBHR AMHC SP Building Automation System (BAS)

The Illinois Department of Behavioral Health and Recovery (DBHR), on behalf of Alton Mental Health Center located in Madison County, is procuring IT-side support services for the facility's Building Automation System (BAS) and generator for a one-year term beginning July 1, 2026, and ending June 30, 2027. The scope of work is limited exclusively to computer and server support, software platform stability, cybersecurity, patching, and data protection functions, explicitly excluding HVAC programming, mechanical system control tuning, field device work, and controller replacements. Key vendor responsibilities include applying operating system and security patches quarterly, maintaining antivirus and anti-malware protection, conducting automated daily and weekly backup procedures with both offsite and onsite storage, implementing access control and user account management with multi-factor authentication, and providing standard support response within 24 hours and critical outage response within 4 hours. Required deliverables include quarterly server health and update reports, quarterly backup verification documentation, annual cybersecurity posture reports, and semi-annual access and user audit lists. All assigned personnel must comply with Illinois Department of Innovation & Technology (DoIT) security requirements and state background screening standards, and vendors must demonstrate the ability to meet state IT security standards aligned with NIST Special Publication 800-53 Revision 5 baselines. The opportunity was posted on May 5, 2026, with proposals due on May 8, 2026.

The solicitation documents do not identify any specific set-aside designations, disadvantaged enterprise restrictions, or incumbent vendor information. Vendors must maintain General Commercial Liability insurance of $1,000,000 per occurrence and $2,000,000 annual aggregate, comply with prevailing wage requirements where applicable, and obtain prior written approval before subcontracting. The State retains full intellectual property ownership of all work products, and vendors are prohibited from using artificial intelligence without express written State authorization. All data use is strictly limited to contract fulfillment, and vendors must notify the State of any data breaches within twenty-four hours and implement remediation within the same timeframe for critical and high-severity vulnerabilities. No specific pricing information, budget ranges, or award values are disclosed in the available procurement documents.