St. Louis County Library District

The buyer is seeking a cloud-based Managed Detection and Response (MDR) system to monitor and archive event log information for their network computing infrastructure across 21 locations. The solution should improve security posture, event management, and logging capabilities. It must detect, halt, and mediate malicious activity across the buyer's network, including PCs, servers, network devices, and cloud services. The project is supported by a federal grant and requires compliance with specific state and federal regulations.

• 9/26/2024 - Deadline for submission of questions
• 9/30/2024 - Answers to questions posted
• 10/16/2024 - Proposal Due Date
• 11/18/2024 - Board of Trustees meeting for approval
• 2/1/2025 - Contracted services to begin
• 1/31/2027 - Contracted services end

• Provide MDR services for 475 PCs, 35 servers, 650 Google Workspace accounts
• Implement 24/7 continuous network monitoring and logging services
• Detect network-based events like unauthorized access and malicious traffic
• Provide user behavior analytics to identify anomalies and insider threats
• Monitor cloud-specific events and identity/access management
• Implement solution with 90-day log retention and on-boarding services
• Ensure data privacy and compliance with relevant regulations
• Provide administrative interface and reporting dashboard functionality
• Detect application-based events like WAF violations and API abuse
• Identify misconfigurations in cloud infrastructure and unauthorized resource creation