RFP-Managed Security Service Provider (MSSP)

Wharton County Junior College (WCJC) is seeking a Managed Security Services Provider (MSSP) through a Request for Proposals (RFP) to support comprehensive cybersecurity monitoring and protection across its four-campus environment. The procurement targets a vendor capable of providing 24x7 security monitoring, threat detection, and incident response for the college's complex IT infrastructure, which includes 85 servers (reducing to 50 by November 2025), 2,000 endpoints, and multiple SAAS services. The selected MSSP must integrate with existing technologies including Sentinel One, Fortigate Firewalls, Office 365, Google, and internal active directory domain systems. The proposal will be evaluated using a 100-point scoring system, with points distributed across technical expertise (20 points), experience and qualifications (10 points), service approach (15 points), compliance experience (15 points), reference track record (10 points), and pricing (30 points). Sealed proposals are due on June 19th, 2025, at 11:00 AM, with an anticipated contract award on July 15th, 2025. The initial contract term will be one to three years, with an option to renew for one additional year, and either party can terminate with 120 days' written notice.

The RFP does not explicitly mention specific set-aside designations or restrictions for disadvantaged enterprises. The college serves approximately 5,500 students and 598 total employees, with compliance requirements including TAC202, HIPAA, FERPA, and FTC financial safeguards. While no incumbent vendor is identified in the documentation, the MSSP must demonstrate capabilities to handle a complex educational technology environment with multiple regulatory compliance needs. The solicitation allows potential vendors to obtain specifications through the Texas Smart Buy website or by emailing buenoc@wcjc.edu. The Board of Trustees reserves the right to accept or reject any proposals and act in the best interest of the college. Though a specific budget range is not explicitly stated, the comprehensive nature of the cybersecurity services and the extensive technological infrastructure suggest a significant contract value commensurate with providing robust security monitoring and incident response for a multi-campus educational institution.