Managed Cybersecurity Services

The California-based government authority is seeking a vendor to provide managed cybersecurity services, specifically an active Incident Response Retainer (IRR) service. This service must ensure twenty-four-seven availability of qualified responders who can rapidly activate, triage, and mobilize technical, forensic, and investigative resources during a cybersecurity incident. The authority needs to solve the problem of preparing for, investigating, containing, and recovering from potential cybersecurity threats and breaches. The scope of work covers on-demand access to expert incident response capabilities, digital forensics, malware analysis, threat intelligence, and incident coordination. Response personnel must possess demonstrated knowledge, skills, and abilities consistent with their applicable work roles. Additionally, the selected vendor must apply elevated handling procedures, defined during provisioning and onboarding, to sensitive systems such as identity and access management platforms, certificate authorities, financial or human resources systems, systems processing personal or protected health information, operational technology, and air-gapped environments. Eligible bidders must be onshore organizations based entirely in the United States. The authority requires all performance of the work to occur offsite. The agency has not disclosed a specific budget and is looking for proposals to determine the cost of these services.