About this opportunity
AI summaryBrunswick County requests sealed proposals for managed cybersecurity services to augment its existing IT cybersecurity staff. Desired services include daily administration, monitoring, reporting, and support across a Security Information and Event Management (SIEM) solution, 24x7x365 Security Operation Center (SOC), Managed Detection and Response (MDR), vulnerability scanning (Qualys preferred), and a patching solution (NinjaOne preferred). Performance will be offsite, and eligibility is restricted to onshore United States organizations. Bidders must submit sealed proposals by November 27, 2026, at 4:00 PM ET. Submissions require key personnel details, an implementation plan, at least three project references, insurance certificates, and an Appendix B cost analysis outlining one-time setup, annual, and five-year costs. An evaluation committee will score proposals across 100 total points based on vendor qualifications, technical solutions for each cybersecurity domain, and cost.
Buyer and opportunity details
- Client
- Brunswick County
Scope of work
- Cloud-based Security Information and Event Management (SIEM) setup, tuning, and ongoing management
- 24x7x365 Security Operation Center (SOC) monitoring and incident response
- Managed Detection and Response (MDR) services
- Vulnerability scanning (Qualys preferred or alternative)
- External penetration testing on 75 publicly available external addresses
- Software update and patching solution (NinjaOne preferred or alternative)
- Templates and documentation for policy development or review
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| The qualifications of the vendor to provide cybersecurity managed services | Not specified |
| The proposal by the vendor to provide a SIEM solution | Not specified |
| The proposal by the vendor to provide a SOC solution | 15 |
| The proposal by the vendor to provide a MDR solution | 15 |
| The proposal by the vendor to provide a Vulnerability solution | Not specified |
| The proposal by the vendor to provide a Patching solution | Not specified |
| Cost | 15 |
Minimum qualifications
- SOC must be a 24x7x365, United States of America (US)-based Security Operation Center
- Provider must comply with federal E-Verify Program requirements under N.C.G.S. § 143-133.3
Documents to include with your response
- Cover letter/letter of intent on vendor's letterhead signed by authorized representative
- List of key personnel and qualifications
- Detailed Form of Proposal
- Detailed implementation plan and major deliverables and timing
- Reference list of at least three (3) current or completed projects
- Certificate of Insurance
- Completed Appendix B including Cost Analysis
- Searchable electronic copy on a USB drive
Key dates
- Issue Date
- October 30, 2026
- Proposals due
- November 27, 2026, at 4:00 PM ET
How to submit
- Method
- Mailed or hand delivered sealed hard copy
- Instructions
- Submit one (1) sealed hard copy of the proposal along with a USB drive containing an identical, searchable copy to 45 Courthouse Drive, Building E (for hand delivery), marked 'SEALED PROPOSAL, DO NOT OPEN – IT MANAGED CYBERSECURITY SERVICES'.
Contract details
- Term
- Initial term of one (1) year, automatically renewed unless notice of intent not to renew is given at least sixty (60) days prior to term end.
- Insurance and bonding
- Commercial General Liability, Commercial Automobile Liability, Professional Liability, and Workers' Compensation insurance, naming the County as an additional insured and certificate holder with 30 days advance cancellation notice.