Data Security Posture Management

Background
The City of Portland, Oregon’s Bureau of Technology Services (BTS) is seeking proposals for a Data Security Posture Management (DSPM) platform. The purpose of the contract is to improve sensitive data awareness across the City, strengthen the overall data security posture, and meet cyber security insurance provider requirements.

Work Details
The DSPM platform is expected to provide a phased-in solution for discovery, tagging, and reporting of sensitive City information on-premises and in the cloud. It should also have the capability to restrict and prevent unauthorized exfiltration of City Confidential information from various egress channels or interfaces across the City network.
The work overview includes detailed specifications, functional and technical requirements, work scope and timeline over the next five years.

Period of Performance
The initial Term of the Contract is anticipated to be three (3) to five (5) years from the Effective Date, with the City’s option to renew for additional periods. The Contractor is expected to begin work upon Contract execution with submittal of final Deliverables to the City occurring by approximately August 2024.

Place of Performance
Contract performance may take place in the City’s facility, the contractor’s facility, a third-party location, or any combination thereof. The Contractor may need to access the City’s servers either physically or remotely.