Managed Security Service

The agency is seeking a Managed Security Service Provider (MSSP) to offer 24/7 monitoring and incident response for its network infrastructure, endpoints, applications, and critical transportation systems. The project covers continuous monitoring, rapid detection, notification, and remediation of security incidents. The selected provider will also be responsible for documentation and reporting, maintaining traceable security controls, and providing regular performance metrics, risk assessments, and audit-ready documentation. The scope of work includes facilitating secure integration of existing and future Intelligent Transportation Systems (ITS) devices and services into the statewide transportation network, aligning with the statewide ITS architecture. The provider must ensure 24/7 network oversight, maintain compliance with federal and state cybersecurity standards, and assist in the secure configuration and maintenance of office-based and field-deployed network equipment. This includes monitoring ITS field device access, configuration changes, and firmware updates, as well as detecting and preventing known and emerging threats. Eligibility rules require that the performance of the work will be onsite, and vendors must be onshore (USA Only). Bidders must comply with NIST Special Publication 800-171 Revision 2 and NIST Special Publication 800-53 Revision 5 Moderate level controls. Additionally, vendors must achieve StateRAMP Ready/Authorized certification, or provide a StateRAMP Security Snapshot with their response if not progressing towards authorization. Prohibited technologies, as defined by the State of New Hampshire and the FCC Covered List, must not be used. Evaluation criteria are not explicitly detailed in the provided text, but the agency is looking for proposals. Budget signals indicate the agency is looking for proposals and has a not-to-exceed price quoted in the Vendor Response Section VIII: Price Proposal. Key dates include a proposal due date and time of October 13, 2026, at 3:00 PM ET. A pre-bid conference will be held on August 07, 2026. The contract period will be for one year. Responses can be submitted digitally via email or online.