Managed Cybersecurity Detection, Response and Monitoring Services

The government authority located in Cook, Illinois requires a unified, managed cybersecurity detection, response, and monitoring solution to protect its digital infrastructure. The agency is attempting to secure its operations through continuous real-time threat analysis and active, human-led incident response. The scope of work covers deploying and managing endpoint detection and response agents across all village-owned Windows, macOS, and applicable Linux systems. The selected provider must also deliver identity threat detection and response by continuously monitoring the village's Microsoft 365 and Entra ID tenant for identity-based threats. Additionally, the agency requires a fully managed security information and event management capability to ingest, normalize, and correlate security telemetry from across the village environment. This service must operate twenty-four hours a day to ensure active response and incident handling. The agency is limiting eligibility to onshore organizations based in the United States. All performance of the work will take place offsite. The contract period will span three years, and the agency is currently looking for proposals to determine the budget.