Security Operations Center (SOC) for Local Government Entities

Background
The Commonwealth of Virginia, through the Virginia Information Technologies Agency (VITA), is seeking a Supplier to establish a Security Operations Center (SOC) for local government entities. This initiative aims to enhance cybersecurity measures for local governments, tribal governments, and public educational institutions by providing 24x7 monitoring and incident response capabilities.

The project aligns with Virginia's participation in the State and Local Cybersecurity Grant Program (SLCGP), which aims to improve the cybersecurity posture of state and local public entities.

Work Details
The Supplier will be responsible for creating a comprehensive SOC that includes necessary tools, processes, and a team of IT security professionals for continuous security monitoring. Key responsibilities include:
- Monitoring, detecting, analyzing, and responding to cybersecurity incidents.
- Investigating, triaging, containing, mitigating, and resolving security events.
- Managing communications with local government entities and VITA regarding security activities.
- Onboarding and offboarding entities to the SOC environment.
- Receiving reports from entities about potential malicious activities.
- Providing technology and services to collect data from diverse environments across various localities and affiliated entities.

The services must be flexible, cost-effective, transparent, and scalable to meet the needs of local government entities.

Period of Performance
The contract will commence upon award and is expected to provide ongoing services as needed by local government entities over an extended period.

Place of Performance
Services will be performed within the Commonwealth of Virginia for various local government entities including counties, municipalities, cities, towns, tribal organizations, public educational institutions, and other public bodies.