IDEA1496 NuHarbor Monitoring Splunk

The California Department of State Hospitals is requesting quotes for managed security monitoring services for Splunk Enterprise Security supporting up to 100 Splunk Virtual Capacity (SVC) under RFQ #96 IDEA1496, with quotations due October 23, 2026 at 12:00 PM via the Vendor Submission Portal. This is an open-market, competitive procurement.

Small business preferences of 5% apply to California-certified small businesses or non-small businesses with 25% California-certified small business subcontractor participation. Disabled Veteran Business Enterprise (DVBE) incentives ranging from 3% to 5% are available based on confirmed DVBE participation levels.

The vendor will provide managed services encompassing monitoring and investigation of security and system health alerts, security review, rule tuning, notable event investigation, security use case development, Splunk administration, upgrades, dashboard and search development, data source onboarding, service desk integration, and threat intelligence delivery. The vendor may employ proprietary and third-party software solutions and may revise or modify the Managed Services at its sole discretion provided obligations under the Statement of Work for implementation and monitoring are met. Services are performed remotely and delivered to DSH locations at Atascadero, Coalinga, Metropolitan, Patton, Napa, and Sacramento. The agreement is subject to HIPAA and HITECH Act compliance, with extensive confidentiality, security, and data protection provisions consistent with federal and state privacy regulations.

The contract term is one year from execution with an option to amend for up to one additional year at the same rates. Pricing for software license and maintenance fees constitutes a subscription, with first-year payment due upon contract execution and subsequent annual payments invoiced for remaining subscription periods. Award will be made to the supplier meeting all administrative requirements and providing the lowest net cost quotation.

Submissions must include Cover Sheet, DSH Cost Table, Commercially Useful Function Documentation, STD 204 Payee Data Record, Bidder Declaration (GSPD-05-105), seller's permit, California Civil Rights Laws Certification, Darfur Contracting Act Certification, SOW Contact Information, and GenAI Technology Use & Reporting notification if applicable. The primary DSH contact is C.J. Miller at (916) 951-5585 or CJ.Miller@dsh.ca.gov.