BeyondTrust Privileged Access Management Solution, Implementation, and Training

Background
The North Carolina Department of Revenue (NCDOR) is seeking to procure a turnkey BeyondTrust Privileged Access Management (PAM) solution, along with implementation services and training.
The goal of this solicitation is to enhance the security and management of privileged access within the department's IT infrastructure.

Work Details
The contract includes the following key components:
1. **Core Modules**:
- Privileged Remote Access: Secure jump/bastion capabilities with session joining and real-time termination.
- Privileged Remote Access Training for Administrators for FedRAMP, annual access for three (3) administrators.
- Deployment Options: Support for cloud, on-premises, or hybrid deployment models with high-availability clustering.

2. **Technical Specifications**:
- Support for 100 licensed seats and 100 concurrent sessions, scalable to 500 sessions with console response times under two seconds.
- Integration capabilities with NCID, Microsoft Entra (or equivalent), Active Directory/LDAP, SAML 2.0, and SIEM tools.
- Security measures including AES256 encryption for data at rest and TLS 1.2+ for data in transit.
- Audit features such as tamper-evident session recording and immutable logs stored for a minimum of twelve months.

3. **Implementation Services**: Professional services to deploy the PAM solution as per the Statement of Work.

4. **Training**: One eight-hour remote Administrator course and two four-hour end-user remote training sessions.

Period of Performance
The contract will have an initial term of three (3) years, invoiced annually, with an option to extend for two additional one-year periods at the State's discretion.

Place of Performance
The services will be performed primarily in North Carolina, as specified by the NCDOR.

Bidder Requirements
Vendors must comply with E-Verify requirements as per N.C.G.S. § 143B-1350(k).
Additionally, vendors are encouraged to participate in this procurement process if they are classified as Historically Underutilized Businesses (HUBs).