Enterprise Automated Digital Forensics & Incident Response (DFIR) - 26/Pro-0024-S
Closed State & local contract opportunity Posted
- Solicitation number
- BPM056037
- State
- Maryland
- Responses due
Opportunity facts
Opportunity details come from emma.maryland.gov. Updated .
About this opportunity
Morgan State University's Office of Procurement and Property Control is requesting proposals for an enterprise automated digital forensics and incident response (DFIR) solution under RFP 26/PRO-0024-S, with proposals due April 24, 2026 at 12:00 PM EST. This procurement is restricted to certified small businesses registered with the Maryland Department of General Services Small Business Reserve Program — a decision-flipping set-aside.
The scope includes remote forensic collection architecture across Windows, macOS, and Linux endpoints; automated triggering and integration with existing Security Operations Center (SOC) platforms; centralized evidence management with encryption and role-based access control; and timeline and root-cause analysis capabilities. The system must enable rapid collection and legal-grade preservation of digital evidence across all endpoints to minimize dwell time and reduce incident response from days to minutes. Offerors must demonstrate experience managing at least three comparable enterprise DFIR projects and provide references.
The contract consists of an initial three-year base term followed by two optional one-year periods exercisable at the University's discretion. All rates are fixed for the contract term. Payment is issued thirty days after receipt of valid invoices. Award will be made to the responsible offeror whose proposal represents the best value based on technical and financial evaluation. Evaluation criteria emphasize technical approach, management approach, and past performance.
Questions are due April 2, 2026 at 2:00 PM EST. No pre-proposal conference or site visit is scheduled. Proposals must be submitted in two sealed volumes (technical and financial) with one original and one copy each, along with proposal affidavits, conflict of interest disclosures, past performance references, insurance documentation, and EFT registration forms.
Opportunity text
The purpose of this Performance Work Statement (PWS) is to establish an enterprise-wide, automated digital forensics and incident response (DFIR) capability. This will enable the institution to rapidly collect, preserve, and analyze digital evidence across all endpoints to minimize "dwell time" and ensure legal-grade preservation of evidence during security breaches.
Background: As the University's digital footprint expands, traditional manual forensic collection is no longer scalable. The institution requires a solution that integrates with existing security orchestration to provide "speed-to-evidence," allowing the security team to capture volatile memory and disk artifacts across the network in minutes rather than days.
Files
On GovTribe
Work this opportunity
- Track it in your pipeline
- Similar opportunities
- Ask GovTribe AI about this opportunity