INVITATION TO BID
Tooele City
90 North Main
Tooele City, Utah 84074
Notice is hereby given that Tooele City Corporation (OWNER) will be accepting bids for an MDR system to work in conjunction with our in-place computer infrastructure. This invitation to bid will be open to competing companies through March 30th, 2023. Implementation of the chosen product is scheduled for the 2023-2024 fiscal year
Project Requirements
1. Solution should be a SIEM, MDR, internal and external vulnerability monitoring in a single platform.
2. Must be data-agnostic in regards to collecting data from connected systems (endpoint protection, firewalls, other systems as required).
3. Must provide full viability to the platform allowing Tooele City to all data.
4. Solution should be fast and easy to deploy.
5. Preference will be given to fixed pricing with no data ingestions limits and no extra charges regardless of how much data we ingest.
6. Solution must automatically analyze network health components including metrices like, GPO violations, stale accounts, passwords that never expire, stale passwords, and analyze privilege across the domain.
7. Solution must have a simplified alert management to reduce alert fatigue and the ability to stop alerts for known issues.
8. Enhanced Monitoring - The system should automatically set a base line of monitoring at deployment. SIEM rules must be initially automatically written without deployment hours or lots of customization.
9. System should have the following Built in Response Options: Target an AD account, disable or force a password reset, and more. Isolate, power off or reboot a system Block IP address on the firewall. The system should also have SOAR action that automates responses.
10. System must have some functionality to allow vendor to remote manage incidents when a response is needed.
11. Solution must have User & Entity Behavior Analytics (UEBA) with the ability to: Identify, detect, analyze, and prioritize anomalous behavior in real-time.
12. Solution must bring in multiple threat Intelligence feeds including CISA with the ability to automatically threat hunt every IP for in the data lake for Indicators of compromise.
13. Solution must provide a geo map and analyze IPs in Microsoft 365, firewall, and VPN traffic.
14. Solution must provide sophisticated, but easy to use research tools giving admins the ability to scope a potential breach quickly and expertly.
15. Solution should have Built-in One Touch Reporting Executive and Compliance reporting for PCI DSS, NIST Cybersecurity Framework, HIPAA compliance, and more.
16. Must be able to schedule reports.
17. Solution must have the ability to create custom reports
18. Solution must provide the ability to Investigate events on accounts, servers, and endpoints quickly searching systems or accounts for different data points. Access events, process execution, anti-forensics, share device access, remote code execution, and file creation are some examples.
19. 365 Days 24X7 Real Time Monitoring with a dedicated Security Operation Team. Vendor response time SLA must be included in system proposal.
20. Solution monitors network traffic in real time to identify IoC.
21. Solution must provide an agent to look for vulnerabilities on all systems.
22. Contract must be for 1 year with the ability to renew contract up to 5 years.
Submission of Sealed Bids
Sealed bids will be received by the Tooele City IT Department and can be mailed or dropped off at 90 North Main, Tooele, Utah 84074 or through email sent to chrisn@tooelecity.org until 2:30 PM on March 30th, 2023.
Bids will be reviewed, with bid placers to be notified by April 10th, 2023 by 5pm regarding the status of their bid. After the opening of said sealed bids no changes in prices or other provisions of bids prejudicial to the interest of the city or fair competition shall be permitted.
Evaluation
Submissions will be evaluated by the criteria described above. Bids submitted must comply with the requirements listed above and any bid that does not may be disqualified. Multiple bids from a single vendor, or for the same product, will be rejected.
Tooele City reserves the right to reject any and/or all bids presented. This rejection right includes any formal bid and/or sealed competitive bids with or without cause. If all bids are rejected then Tooele City reserves the right to reopen the RFP. Tooele City also reserves the right to cancel any agreements prior to finalization of the Tooele City 2023-2024 budget due to funding issues.
Implementation
Adoption of the winning bid's software is to be negotiated and implemented during the next fiscal year starting July 1st, 2023. Installation of accepted product is planned for some time between July 1st and August 31st, subject to budget considerations.
Questions
Bidders are encouraged to email questions to the IT Director at chrisn@tooelecity.org or 435-843-2260. The deadline for the submittal of bid questions will be 3:00 PM on Wednesday, March 29th, 2023. Questions submitted by vendors regarding the project and a copy of all questions asked during the project run dates (March 1st 2023 to March 29th 2023) will be retained and will be made available upon request. It is up to the vendors to make sure any revisions due to questions are resolved before the due date for project consideration.
The OWNER reserves the right to reject any or all bids; or to accept or reject the whole or any part of any bid; to award schedules separately or together to contractors, or to waive any informality or technicality in any bid in the best interest of the City. Only bids giving a firm quotation properly signed will be accepted.