M00P6605178 Endpoint Central

The Maryland Department of Health is issuing a Purchase Order Request for Proposals (PORFP) to procure 50 additional Zoho ManageEngine Endpoint Central Cloud Security Edition annual subscription licenses, expanding the agency's existing license base from 160 to 210 seats. The licenses will be prorated through March 28, 2027, with a contract period running from June 1, 2026, through March 28, 2027. Proposals must be submitted by May 21, 2026, at 11:00 AM EST, with a questions deadline of May 18, 2026, at 10:00 AM EDT. All submissions must be password-protected and directed to Danae Augustyniak at the Maryland Department of Health's Office of Epidemiology, Technology and Informatics via eMMA or email. Evaluation criteria include conformance to specifications, lowest certified bidder pricing, and submission of a completed Data Use Agreement. Qualified bidders must be authorized Zoho/ManageEngine resellers capable of providing the Manufacturer's Suggested Retail Price, complete software licensing agreements including EULAs and Enterprise License Agreements, and must certify that all software is virus-free prior to delivery. Additionally, bidders must provide a Letter of Authorization from the manufacturer, and pricing must remain valid for at least 90 days following the proposal due date, with annual charges billed on the anniversary of the first invoice.

This solicitation is exclusively restricted to current Master Contractors awarded under the COTS 2012 master contract (060B2490021), significantly limiting the pool of eligible respondents. The procurement builds upon the Maryland Department of Health's existing infrastructure of 160 Endpoint Central seats, requiring integration with the agency's current security and endpoint management environment. All selected contractors must comply with a comprehensive Data Use Agreement that establishes requirements for protecting personal information, including implementation of reasonable security measures, cryptographic transmission protocols, regular security reviews, and designation of a privacy officer. Contractors are obligated to notify the Maryland Security Operations Center within 24 hours of any data breach and affected individuals within 45 days, bearing all associated investigation, notification, and corrective action costs. The agreement further requires contractors to ensure all sub-processors maintain equivalent security and privacy compliance standards. Specific budget or award values are not disclosed in the solicitation materials, though pricing will be evaluated as a primary selection criterion with billed annual charges occurring on the anniversary of the first invoice.