Enterprise Cybersecurity Services Solution

Background
Miami-Dade County, represented by the Information Technology Department (ITD), is soliciting proposals for an Enterprise Cybersecurity Services Solution. The goal of this contract is to enhance the County's cybersecurity environment through software, products, and services that will support and maintain its cybersecurity operations.

The selected solution will augment ITD staff within the County’s Security Operations Center (SOC) and improve the County's resilience against cyber threats. The contract is anticipated to be awarded for a five-year term with an option for one additional five-year renewal.

Work Details
The selected Proposer will provide enterprise managed cybersecurity services, including: monitoring the County’s security environment, investigating incidents, providing guidance for remediation, managed alerting and monitoring services, continuous threat hunting, and incident response.

The solution must support 30,000 endpoints and users. Specific tasks include importing 13 months of historical data from the existing SIEM platform, performing information and event analysis, conducting regular meetings with County staff, preemptive detection of security events 24/7, providing data reporting via a cloud-hosted SIEM portal, project management and implementation services, and training.

The solution must integrate with existing technology products such as Qualys, Microsoft Exchange/Office 365, Active Directory, and various cloud services. Additionally, it should include capabilities for ingesting telemetry from multiple sources and provide a multi-tenant interface with robust reporting functionalities.

Period of Performance
The contract will be performed over a five-year term with an option to renew for an additional five years at the County's discretion.

Place of Performance
Services will be performed in Miami-Dade County, Florida.

Bidder Requirements
Proposers must demonstrate their capability to provide managed cybersecurity services compliant with applicable governmental and industry standards including PCI, CJIS, and HIPAA. They must also have experience in providing similar services to large public entities.