County Cybersecurity Solutions

Inyo County Information Services Department

Buyer seeks a Managed Security Service Provider to protect its digital assets. The provider will offer detection, analysis, and reporting of vulnerabilities and intrusion events. Services include 24/7 monitoring, incident response, and recovery assistance. The buyer requires protection for endpoints, servers, and network devices across multiple locations serving 20,000 residents.

• 8/12/2024 - Bid Opening
• 8/30/2024 - Question Deadline
• 9/30/2024 - Proposal Due Date

• Security Operations Center must hold ISO27001 certification
• Provide SOC1 or SOC2 report
• Security Operations Center must have 99.99% uptime
• Onsite Security Analysts must hold SANS GCIA certification or equivalent
• Security analysts must have passed background checks and be located in USA

• Provide 24/7/365 security monitoring and alerting for endpoints, servers, and network devices
• Prevent malicious code from running on protected devices
• Perform automated vulnerability testing on public-facing IT infrastructure
• Develop and implement endpoint management solution
• Conduct annual vulnerability and penetration testing
• Provide regular security briefings and threat updates
• Detect and disrupt DoS attacks and network intrusions
• Isolate and recover compromised endpoints and network devices
• Offer full cycle security incident management services
• Provide access to 90 days of log data for queries and reports