Managed Detection and Response

The South Dakota Board of Regents (SDBOR) is conducting a Request for Information (RFI) for a Managed Detection and Response (MDR) cybersecurity solution to serve six public universities, two special schools, and the SDBOR office. The procurement seeks comprehensive network security monitoring and incident response capabilities, with a focus on evaluating MDR, MDDR, and XDR solutions that can provide 24/7 monitoring, real-time threat detection, and advanced incident response. Key deliverables include detailed information about service offerings, integration capabilities with existing security tools like Microsoft Defender for Endpoint and Azure Active Directory, and the ability to support compliance requirements including HIPAA, FERPA, and GLBA. The RFI requires respondents to submit pricing estimates for 3- and 5-year periods, covering various cost models such as subscription, per-device, per-user, and performance-based pricing. Critical dates include a deadline for questions by June 14, 2024, submitted via email to chris.kolsrud@sdbor.edu, with responses to be distributed to interested parties, and a final response submission deadline of June 28, 2024 at 3:00 p.m. Central Time.

The RFI does not specify any set-aside designations or restrictions on responding organizations, nor does it identify an incumbent vendor. The current technological environment includes Microsoft Sentinel as the primary SIEM, Cisco network infrastructure, and a system-wide environment comprising multiple workstations, servers, students, faculty, administrators, and SaaS email users. No specific budget range or award value has been publicly disclosed, and the SDBOR reserves the right to reject any requests or potentially issue multiple solicitations based on the RFI responses. The organization is seeking a solution that can enhance its cybersecurity defenses and improve overall security posture, with potential for future product demonstrations based on the received information. Respondents are also required to provide references for implementations completed within the last two years, demonstrating successful MDR solution deployments in comparable environments.