24/7 Cybersecurity Monitoring and Incident Response Services

Background
The Wake County Public School System (WCPSS) is seeking information for 24/7 Security Event Monitoring, Alert Triage, and Escalation Services to assist the district's Information Security team in identifying and responding to potential cyber threats.
The district operates a hybrid technology environment, including on-premises infrastructure and cloud-hosted platforms such as AWS, Microsoft 365, and Google Workspace.
The goal of this contract is to find a monitoring partner capable of supporting this mixed environment.

Work Details
The services required under this contract include:
- Level 1: Monitoring and Escalation Only
- Continuous (24/7/365) observation of log sources and telemetry to detect potential security events.
- Initial review and prioritization of events based on severity, business impact, and urgency.
- Timely notification of significant alerts to designated district personnel via agreed communication channels (e.g., email, SMS, phone, or ticketing system).

- Level 2: Monitoring + Limited Response Support (includes all Level 1 services plus):
- Advanced Log Analysis: Correlation of complex events across multiple platforms.
- Containment Support: Guidance or automation to isolate infected hosts.
- Coordination: Notification and context for exposed assets, including CVE tracking or patch advisories.

- Level 3: Full Managed Detection & Response (MDR) (includes all Level 1 and 2 services plus):
- Proactive Threat Hunting: Manual or automated searching for signs of compromise or unusual behavior.
- Forensic Investigations: Support for incident analysis, data recovery, and root cause determination.
- Tailored Playbook Development: Custom response workflows aligned to district priorities.
Professional Services may also include dedicated advisory, compliance reviews, or hands-on incident response consulting.

Period of Performance
Responses must be received by June 6, 2025.

Place of Performance
Wake County Public Schools System, Raleigh, NC.

Bidder Requirements
Vendors must provide detailed responses that define all services and products required by the proposed solution. Responses should include information on all business models offered related to the provisions noted in the Executive Summary.