Specifications include, but are not limited to: VITA is soliciting proposals via an RFP on an expedited timeline for Managed Security Services on an enterprise-level that covers both VITA and Virginia Executive-Branch Agency Customer infrastructure and applications for the Commonwealth of Virginia (COV) on premise and cloud environment. Suppliers will be required to integrate into VITA's Multi-Supplier Integrated (MSI) model as a Service Tower Supplier. Suppliers will not utilize any proprietary tools or data formats that do not allow for full integration/interoperability with the COV toolset. Successful MSS Solutions will prioritize self-service and automation. The RFP includes provision of the following two service categories: Managed Security Operations Center (SOC) and Security Engineering (SEC-ENG), detailed below. The Managed Security Operations Center (SOC) will include necessary tools, relevant process, and a team of IT security professionals to perform 24X7X365 security monitoring of VITA and all Customer agency infrastructure and applications. The COV's current logging software is Splunk. Supplier may leverage the COV toolset or bring their own SIEM that also integrates with the COV toolset. The Managed Security Engineering Services Supplier will be responsible for the operation, administration, and maintenance of all security technologies implemented by VITA, including (at a minimum) the following: Endpoint detection, proxies, firewalls, vulnerability scanners, full packet capture, CNAPP, and SIEM. Suppliers will be able to respond to requirements for individual service categories in the final RFP, or both, and VITA will reserve the right to award in combination or independently, or issue multiple awards. Suppliers should review file VITA-RFP 2024-07 - Admin (RFP Instructions) in advance of other files in the extensive RFP Package, and follow instructions within each document if responding only SOC or only SEC-ENG. All communications related to this RFP should be directed to the Single Point of Contract (listed as the Buyer on this posting)
