UMGC RFP #92340 - Managed Security Operations Center (SOC) Services

The University of Maryland Global Campus (UMGC), a Maryland state institution, is requesting proposals for managed Security Operations Center (SOC) services under RFP #92340, with technical and price proposals due November 16, 2026 at 10:00 AM ET. An MBE subcontracting goal of three percent of total contract value, including renewal option terms, applies.

UMGC will award a single contract to one qualified offeror. Minimum qualifications are current ISO/IEC 27001 certification or SOC 2 Type II attestation applicable to the proposed services, submission of required case studies including at least one demonstrating new SOC implementation experience, and three professional references with contact details and service descriptions. A designated Service Operations Manager must be identified as mandatory Key Personnel and remain assigned to the contract for its full duration without changes unless authorized by contract amendment.

The scope is 24x7x365 security monitoring, threat detection and analysis, incident response, threat intelligence integration, security reporting, and strategic security advisory services. The contractor must comply with NIST frameworks, FERPA, GLBA, PCI DSS, and CMMC standards, maintain commercial general liability insurance of $1,000,000 combined single limit, cyber security/data breach insurance of $5,000,000 per occurrence, and worker's compensation insurance of $1,000,000 per occurrence, with UMGC named as an additional insured. The contractor must report confirmed or suspected data breaches within 72 hours and provide annual SOC 2 Type II reports.

The contract term is three years with two optional one-year renewal periods at UMGC's sole discretion. Offerors must submit fixed pricing for one-time implementation services broken down by five phases (Project Initiation and Planning, Discovery & Design, Configuration & Integration, Testing & Validation, and Go-Live and Stabilization), a fixed monthly price for managed SOC services, and a rate card for as-needed services. All rates must be fully burdened and assume remote work performance. Technical factors weigh greater than financial considerations in evaluation.

The pre-proposal conference is October 29, 2026 from 1:00 PM to 2:00 PM via Microsoft Teams. Questions are due November 2, 2026 at 10:00 AM ET. Virtual discussion sessions for shortlisted offerors are anticipated for December 8–16, 2026, with contractor selection anticipated January 20, 2027 and agreement execution by March 1, 2027.