What the buyer needs
AI summaryThe government authority located in Westborough, MA seeks a vendor to provide cyber resilient services performed offsite. The scope includes assessing infrastructure, security controls, and practices, conducting technical testing of key defenses, developing a minimum set of policies and plans, and connecting to free state or federal resources. The vendor will also support a municipality or internal municipal staff completing the nationwide cybersecurity review as part of an application for funding under the state and local cybersecurity grant program. Additionally, the work involves receiving grants to fund managed detection and response services and narrowly focused cybersecurity technology upgrades to help municipalities, small businesses, and non-profits remediate vulnerabilities and defend against threats. Only onshore USA organizations are eligible to bid, and the buyer is currently looking for proposals. All questions must be submitted no later than April 11, 2025.
Buyer and opportunity details
- Set-aside
- small businesses, and non-profits to remediate cybersecurity vulnerabilities and defend against cybersecurity threats.
Scope of work
- Managed Detection and Response (MDR) services from CyberTrust Massachusetts for up to three years
- Managed endpoint detection and response, network discovery, and vulnerability management
- Active Directory hygiene, identity protection, and application and asset inventory
- One-time capital equipment, technology hardening, and infrastructure upgrades for municipalities
- Implementation of cybersecurity improvements identified through a qualified vulnerability assessment
- Quarterly reporting on vulnerabilities closed, CIS Critical Security Controls, and project status
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| Projects that provide MDR services from CyberTrust Massachusetts | Not specified |
| Projects that support small businesses and non-profits in priority industries | Not specified |
| Projects that address identified cybersecurity vulnerabilities and reduce cybersecurity risk | Not specified |
| Likelihood that improvements will assist in developing a mature cybersecurity program | Not specified |
| Participation of the respondent in statewide cybersecurity collaborations in Massachusetts | Not specified |
Minimum qualifications
- Municipalities, small businesses, and non-profits in Massachusetts
- Small businesses must meet the U.S. Small Business Administration definition
- Lack of debarment status by either the state or federal government
- MDR applicants must first receive a scope of work from CyberTrust Massachusetts
- Technology upgrade applicants must receive a vulnerability assessment within six months of applying
Documents to include with your response
- Overview of the Respondent
- Scope of work from CyberTrust Massachusetts (for MDR projects)
- Non-confidential description of cybersecurity program maturity (250 words maximum)
- Copy of vulnerability assessment (for Technology Upgrade projects)
- List of associated 18 CIS Critical Security Controls (for Technology Upgrade projects)
- Vendor scope of work or municipal IT staff project plan (for Technology Upgrade projects)
- Budget Template (Attachment B)
- Authorized Application Signature and Acceptance Form (Attachment A)
- Copy of respondent's W-9
- Exceptions to the Operating Funds Grant Agreement
How to submit
- Method
- Electronic
- Instructions
- All applications must be submitted via the online link in Section 3.1. Narrative descriptions are limited to 250 words maximum.