Network Detection and Response (NDR) Solution

Background
The State of Oregon, through the Department of Administrative Services, Enterprise Goods and Services, Procurement Services (DAS PS), is issuing this Request for Proposals (RFP) to procure a Network Detection and Response (NDR) Solution. This initiative aims to enhance cybersecurity measures across the state by integrating advanced detection and response capabilities into its existing security infrastructure.

The selected solution will support the mission of the Enterprise Information Services (EIS) Cyber Security Services (CSS) to ensure robust security monitoring and incident response for the state's network.

Work Details
The NDR Solution must include all necessary equipment, configurations, licenses, portals, training, integrations with current security systems, maintenance, and operations support. The State prefers a Software as a Service (SaaS), Infrastructure as a Service (IaaS), or Commercial Off-The-Shelf (COTS) solution.

Key functionalities required include:
- Continuous monitoring and analysis of network traffic to detect anomalies and malicious activities.
- Integration with existing security systems.
- Deployment of NDR Solution Sensors at strategic locations including state perimeter and internal border locations.
- Ability to filter out extraneous traffic such as backups and scans.
- Support for approximately 90,000 actively connected network systems.
- Implementation of machine learning techniques for behavioral analysis.
- Automated responses to detected threats including host containment and traffic blocking.
- Ongoing maintenance and support post-deployment.

Period of Performance
The initial term of the contract will be two years with options for renewal.

Place of Performance
The services will be performed within the State of Oregon, specifically at various locations including cloud environments and on-premises data centers.