24/7 Cybersecurity Monitoring, Patch Management, And Cyber Network Monitoring Services

Background
Jasper County Government is seeking proposals from qualified cybersecurity managed service providers (MSPs), managed security service providers (MSSPs), or cybersecurity consulting firms to enhance its cybersecurity posture. The County operates a diverse technology environment that supports various operations including public safety and judicial systems. The primary goals of the contract include enhancing cybersecurity visibility, providing continuous monitoring, reducing risk exposure, and ensuring compliance with applicable cybersecurity standards.

Work Details
The selected vendor will provide comprehensive 24/7 cybersecurity monitoring, patch management, incident response support, and compliance-related services. Specific services include:
- Continuous 24/7 Security Operations Center (SOC) monitoring of network traffic, endpoints, servers, firewalls, and security devices.
- Cyber network monitoring including traffic analysis, firewall monitoring, intrusion detection, and unauthorized device detection.
- Comprehensive patch management services for operating systems and third-party software.
- Ongoing vulnerability management services including routine scanning and remediation recommendations.
- Incident response services including detection, containment recommendations, recovery assistance, and documentation.
- Compliance support for NCIC, CJIS, and SLED audits with documentation management and evidence collection.
- Detailed reporting requirements including weekly briefings and monthly executive reports summarizing incidents and vulnerabilities.

Period of Performance
The contract will be performed until July 1, 2026.

Place of Performance
Jasper County Government facilities in Ridgeland, South Carolina.

Bidder Requirements
Vendors must have a minimum of five years of experience providing managed cybersecurity services. They should demonstrate experience supporting local government clients and familiarity with CJIS/NCIC environments. Vendors must provide qualified personnel with relevant cybersecurity certifications such as CISSP or CISM. Additionally, the successful vendor must provide proof of insurance covering workers' compensation, general liability, automobile liability, professional liability/errors and omissions insurance, and cyber liability insurance.