RFQ 26-04666 for Splunk Licensing and Professional Services

Background
The Executive Office of Technology Services and Security (EOTSS) of the Commonwealth of Massachusetts is seeking proposals from qualified vendors to provide Splunk licensing and associated professional services. The goal is to support and maintain the Commonwealth’s existing Splunk environment, particularly for Security Operations. EOTSS oversees IT policy and implementation for over 125 state agencies, aiming to enhance cybersecurity and operational efficiency.

Work Details
The selected vendor will provide:
1. **Splunk Licensing**: Management of licensing for Splunk Enterprise Security, including options for a one-year term with specific SKUs such as:
- Splunk Cloud Subscription with Compliance, Encryption at Rest, and Premium Success Plan - 5,000 GB/day
- Splunk Enterprise Security Premier with Premium Success Plan - 5,000 GB/day
- Additional options for Automated Threat Analysis and Essentials.

2. **Splunk Professional Services**: Technical support services for maintaining platform health. This includes data optimization services to improve data quality, collaborative operational support with EOTSS SOC and MSSP, ongoing maintenance and improvement of the Splunk environment, security automation capabilities, detection engineering, content tuning services, and knowledge transfer documentation.

Period of Performance
The contract will have an initial term of 12 months or 36 months depending on the pricing option selected by the Agency. The contract may be renewed or extended upon written agreement.

Place of Performance
Services will primarily be performed remotely; however, an on-site presence may be required up to two business days per week at locations specified by EOTSS in Massachusetts.

Bidder Requirements
Bidders must be current ITS75 or ITS78 vendors. They are required to comply with all applicable laws regarding data privacy and security, including HIPAA regulations. Additionally, bidders must ensure that personnel have appropriate certifications if accessing sensitive information types such as Personally Identifiable Information (PII) or Criminal Justice Information.