NS26-85 Military Installation Development Authority - Managed IT Services & CMMC Level 2 Compliance

Background
The Military Installation Development Authority (MIDA) is an independent state government entity established by the Utah Legislature in 2007. MIDA is responsible for facilitating the development of economic projects that support military installations and missions in Utah. The agency seeks proposals from qualified managed service providers to deliver comprehensive IT support, cybersecurity management, and technical advisory services to maintain secure, reliable, and compliant information systems that support its workforce and mission. The anticipated length of the resulting contract will be three years.

Work Details
The Offeror will provide managed IT services including:

1) Help desk support during U.S. Mountain Time business hours and 24x7x365 availability for critical incidents;

2) Device management through Mobile Device Management (MDM), ensuring security policies are enforced;

3) Administration of cloud-based software licenses and monitoring for unusual activity;

4) Endpoint security with continuous monitoring for malicious activity;

5) Backup and disaster recovery solutions for cloud-based repositories;

6) Incident response to security breaches, including compliance with the Utah Government Data Privacy Act;

7) Assistance with website security and migration from a .org to a .gov domain.

Additionally, the Offeror must ensure compliance with CMMC Level 2 standards through gap analysis, documentation creation, and serving as a liaison for assessments.

Period of Performance
The contract is expected to commence upon execution and will last for three years. Specific timelines include immediate help desk support upon contract execution, implementation of various IT solutions within four months, and completion of the .gov domain transition within six months.

Place of Performance
The services will primarily be performed remotely to support MIDA's remote workforce based in Utah.

Bidder Requirements
Offerors must have at least five years of experience providing managed IT services. They must certify that their operations comply with NIST SP 800-171 standards regarding personnel authorized to access MIDA’s Controlled Unclassified Information (CUI). Joint proposals are permitted but must clearly identify responsibilities between the Lead Offeror and any Partner.