What the buyer needs
AI summaryThe buyer seeks managed security services for its location in Brookhaven, Mississippi. This includes 24x7x365 human-staffed security operations, managed EDR, SIEM and SOAR, and medical-device security. The service requires a human-in-the-loop for all escalations and response decisions, validated by a human SOC analyst. It also includes alert triage, investigation, proactive threat hunting, and incident escalation. The vendor must provide onboarding, agent deployment, tuning, staff training, and regular operational and executive reports. An annual tabletop exercise is also required.
Scope of work
- 24x7x365 human-staffed SOC with alert triage, investigation, threat hunting, and incident escalation
- Managed endpoint detection and response (EDR) with behavioral threat and ransomware detection
- Managed SIEM/SOAR with at least 10 GB/day third-party logs and 90-day searchable retention
- Monthly IT and quarterly medical-device vulnerability assessments with prioritized remediation reports
- Medical-device security guidance covering policy, governance, segmentation, and healthcare threat intelligence
- Annual security risk assessment mapped to HIPAA Security Rule and NIST CSF
- Onboarding, agent/log-source deployment, tuning, staff training, and annual tabletop exercise
- Regular operational/executive reports and quarterly service reviews
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| Requirements compliance | Not specified |
| Total cost | Not specified |
| Healthcare experience | Not specified |
| Service coverage and response SLAs | Not specified |
| Implementation timeframe | Not specified |
| Demonstrated reliability and service quality | Not specified |
Minimum qualifications
- Current SOC 2 Type II report or equivalent independent assurance
- Onshore (USA Organization Only)
Documents to include with your response
- Written quote itemizing setup, licenses, service components, recurring fees, and taxes
- Current SOC 2 Type II report or equivalent independent assurance
- Termination and transition plan
- Comparable customer references
- List of all exceptions and assumptions
How to submit
- Method
- Instructions
- Email written quotes to Joe Farr by November 16, 2026.
