TNH310-2024 Managed Detection and Response (MDR) Services

Background
The Town of North Hempstead is seeking proposals from qualified firms to provide Managed Detection and Response (MDR) services. The goal of this contract is to enhance the Town's cybersecurity posture through comprehensive threat detection, investigation, and response capabilities. The selected firm will be expected to deliver high-quality services at competitive rates, ensuring the Town's information technology systems are secure and resilient against cyber threats.

Work Details
The contract requires the provision of Managed Detection and Response (MDR) services, which includes:

- 24/7 threat detection, investigation, and response
- Integration of end-user security awareness training
- Execution and analysis of vulnerability scans
- Use of both commercial and open-source technologies for scanning
- Methodology for collecting and analyzing vulnerability data
- Triaging and prioritizing vulnerabilities
- Integration with vulnerability assessment data
- Scheduling and management of scans via a portal
- Monitoring security technologies including firewalls, IDS/IPS, and IAM systems
- Updating software for signatures and patches in a non-intrusive manner
- Support for customized correlation rules
- Analysis of user behavior changes indicating risk
- Detection methodologies for targeted attacks
- Configuration of custom alert rules
- Management of false positives
- Workflow processes for incident alerts including automation aspects
- Collaboration with the Town's IT staff during incident response.

Period of Performance
The contract term is three years with an option to extend for two additional one-year terms at the discretion of the Town.

Place of Performance
The services will be performed within the geographic boundaries of Nassau County, New York.