MCS - Training provided by SANS Institute ITN

The State of Michigan's Department of Technology, Management and Budget (DTMB), specifically the Michigan Cybersecurity (MCS) division, is issuing an Invitation to Negotiate (ITN) 25000000007 for SANS GIAC Training and Exams. The procurement seeks to acquire on-demand cybersecurity training courses and GIAC certifications from the SANS Institute, a sole source provider of these specialized training products. The primary objective is to keep cybersecurity staff current on emerging threats, risks, and mitigation controls through comprehensive training programs. Key deliverables include long-form training courses and professional certifications focused on cybersecurity skill development. The solicitation timeline requires vendors to submit questions by February 6, 2025, at 11:00 AM EST, with potential alternative vendor responses due by February 11, 2025, at 11:00 AM. The final proposal submission deadline is February 20, 2025, with Bethany Preston designated as the Solicitation Manager overseeing all communication and procurement processes. Evaluation criteria appear to emphasize vendor qualifications, company background, economic impact to Michigan, and legal compliance based on the attached Vendor Question Worksheet.

The ITN includes multiple set-aside and diversity considerations, with specific sections in the Vendor Question Worksheet focusing on disabled veteran status, supplier diversity, and Michigan-based economic impact. Respondents must provide detailed information about their company's employee classifications, certifications, and potential contributions to the state's economic ecosystem. While the procurement appears open to potential vendors, the document strongly suggests a preference for the SANS Institute as the primary provider, given the sole source description of their training products. The commodity code 92435 for In-Service Training indicates this is specifically for employee professional development. Although precise budget ranges are not explicitly stated in the provided documents, the procurement suggests a substantial investment in cybersecurity training, with the potential contract value implied by the comprehensive nature of the training requirements. Vendors must demonstrate comprehensive legal compliance, including disclosures related to tax status, labor practices, and certifications regarding business operations.