What the buyer needs
AI summaryThe Town of Mooresville seeks proposals from qualified USA organizations to provide offsite managed Security Operations Center (SOC), Security Information and Event Management (SIEM), and mandatory Network Detection and Response (NDR) services for a three-year contract period. The required scope includes continuous 24x7x365 analyst-led monitoring, validation, investigation, escalation, proactive threat hunting, and support for Criminal Justice Information Services (CJIS) requirements across approximately 700 to 850 combined endpoints and servers. Proposers must submit complete electronic proposals through the Town's eProcurement portal by 12:00 pm on December 18, 2026. A pre-bid meeting is scheduled for December 8, 2026, and all questions are due no later than December 11, 2026. The Town will award the contract to the responsible proposer offering the best overall proposal.
Scope of work
- Continuous 24x7x365 analyst-led monitoring, detection, investigation, validation, and threat hunting
- Security Information and Event Management (SIEM) log centralization, correlation, and search
- Mandatory Network Detection and Response (NDR) covering North/South and East/West traffic visibility
- Support for Criminal Justice Information Services (CJIS) requirements and controls
- Responsible, auditable AI-assisted security capabilities with human oversight
- Incident response guidance, evidence preservation, playbooks, and containment action authority
- Transition plan from incumbent services with parallel-run period and testing
- Monthly operational and executive reports, regular service reviews, and SLAs
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| Technical solution, SIEM integrations, mandatory NDR, and AI capabilities | 25% |
| CJIS compliance and security controls | 20% |
| 24x7x365 managed SOC operations | 15% |
| Implementation, migration, and transition plan | 10% |
| Qualifications, public-sector experience, and references | 10% |
| Incident response, SLAs, and reporting | 10% |
| Pricing and overall value | 10% |
Minimum qualifications
- Qualification to conduct business in the jurisdiction
- Not having been debarred by federal, state, or local government
- Demonstrated experience operating a 24x7x365 managed SOC/SIEM service, including CJIS-scoped environments
- Three relevant references
- All licenses, registrations, security clearances, personnel screening, and authorizations applicable to services and CJIS access
- Regularly and practically engaged in providing the services required in this RFP
Documents to include with your response
- Proposal and required attachments
- Acknowledgment of addenda via OpenGov Portal
- Cover letter presenting understanding of the project
- Executive summary including project team identification and summary of services
- Statement of experience, contact info, staff specialties, and years of experience
- Program fulfillment description for current and future needs
- Availability statement for key personnel and performance locations
- Timeframe and timeline description
- Appendix A (Vendor Response Matrix)
- Appendix B (Security and CJIS Questionnaire) and Appendix C (Tiered Pricing Schedule)
How to submit
- Method
- Electronic via the Town's eProcurement Portal
- Instructions
- Submitted via the Town's OpenGov Portal at https://procurement.opengov.com/portal/mooresvillenc. Proposers must register, follow the project, and acknowledge addenda via the portal.