Wentzville R-IV School District Sealed Solicitation

Title: “Endpoint Detection and Response Services and Patch Management” RFP-T-311

Deadline: 3/14/2023 10:00 AM   (UTC-06:00) Central Time (US & Canada)

Status: Awarded

Solicitation Number: RFP-T-311

Description: The purpose of this Request for Proposal (RFP) is to provide Endpoint Detection and Response (EDR) Services, including Managed Detection and Response (MDR) Services and Patch and Vulnerability Management systems for the Wentzville School District. The vendor shall provide training on the proposed solution.


Documents:

Documents as of 2/23/2023
Login to view documents
Login to view documents
Addition 1

Posted: 3/14/2023

Type of Addition: In Review

Addition 2

Posted: 5/2/2023

Type of Addition: Award Information

Documents:

Question 1

Posted: 3/6/2023

Question: • What is the current MDM solution being used, if any, for the MacOS fleet? • If MDM is being used, is it managing other OSes besides MacOS (e.g., iOS, iPadOS, tvOS, etc.) • Does Wentzville currently have an Identity Provider that supports SAMLv2?

Response: The district MDM solution only manages Apple devices (iOS, iPadOS, tvOS, and macOS). The Identity Provider supports SAMLv2.

Question 2

Posted: 3/6/2023

Question: Do you require implementation services?

Response: Implementation services are not required, but may be included as an option in your response.Implementation services are not required, but may be included as an option in your response.Implementation services are not required, but may be included as an option in your response.Implementation services are not required, but may be included as an option in your response.

Question 3

Posted: 3/6/2023

Question: Do you require management services after the fact for patch management or are you just looking to purchase the software and have assistance with deployment?

Response: Management services are not required, but may be included as an option in your response.

Question 4

Posted: 3/6/2023

Question: We see EDR/MDR and Full MDR as options. Would you like pricing for just the EDR and the optional pricing for EDR+MDR?

Response: Specifications are shared in the RFP, specifically EDR/MDR option and Full MDR option. Additional options/recommendations may be included in your response.

Question 5

Posted: 3/6/2023

Question: Would you like a formal proposal response or would you prefer us just upload the proposal form and the questionnaire spreadsheet?

Response: The proposal form and questionnaire spreadsheet are required. A formal proposal response may be submitted also.

Question 6

Posted: 3/6/2023

Question: What tools are currently being used for these services?

Response: All information is included in the response, if information regarding current tools are not included, this is to ensure confidentiality.

Question 7

Posted: 3/6/2023

Question: What is liked/disliked about current tools that is prompting the RFP?

Response: All information is included in the response, if information regarding current tools are not included, this is to ensure confidentiality.

Question 8

Posted: 3/6/2023

Question: What is driving the July1 completion date? -- ie Are current licenses expiring then?

Response: This is our current timeline.

Question 9

Posted: 3/6/2023

Question: What is the team evaluating submissions?

Response: Here is the timeline regarding the RFP… Release RFP for EDR/MDR Services February 27 Vendor Bid Submission Due March 14 Evaluate Submissions (including Proof of Concept) March / April Submit Recommendation to Board of Education April 20 Implementation May/June Project Completion July 1

Question 10

Posted: 3/6/2023

Question: Is there a scorecard being used to evaluate submissions? If so, can you share?

Response: Completion of Proposal Fulfills Requirements Deliverables Experience / Referrals Qualifications Price of Eligible Goods and Services

Question 11

Posted: 3/6/2023

Question: What does the security team for Wentzville look like today? Are there plans to add new internal resources?

Response: All information is included in the response or located on the district website.

Question 12

Posted: 3/7/2023

Question: "Will a vendor be precluded from consideration if they can't offer both the EDR and patch/vulnerability mgmt offerings today? How long does Wentzville SD want to retain its EDR data, understanding there is a cost component to a longer retention period? Assuming you'd like all vendors to quote the same length of time for data retention." “Does a vendor need to meet SPEC-1 and SPEC-2 and SPEC-3 to be considered for this RFP, or will you consider selecting multiple vendors to fulfil the varying requirements of the RFP (the “SPEC-X” sections)?”

Response: -We welcome all submissions and solutions. -At a minimum, we would like to keep EDR data for 6 months, recommended is 1 year. -We welcome all submissions and solutions.

Posted: 3/14/2023

Type of Addition: In Review

Posted: 5/2/2023

Type of Addition: Award Information

Documents:

Posted: 3/6/2023

Question: • What is the current MDM solution being used, if any, for the MacOS fleet? • If MDM is being used, is it managing other OSes besides MacOS (e.g., iOS, iPadOS, tvOS, etc.) • Does Wentzville currently have an Identity Provider that supports SAMLv2?

Response: The district MDM solution only manages Apple devices (iOS, iPadOS, tvOS, and macOS). The Identity Provider supports SAMLv2.

Posted: 3/6/2023

Question: Do you require implementation services?

Response: Implementation services are not required, but may be included as an option in your response.Implementation services are not required, but may be included as an option in your response.Implementation services are not required, but may be included as an option in your response.Implementation services are not required, but may be included as an option in your response.

Posted: 3/6/2023

Question: Do you require management services after the fact for patch management or are you just looking to purchase the software and have assistance with deployment?

Response: Management services are not required, but may be included as an option in your response.

Posted: 3/6/2023

Question: We see EDR/MDR and Full MDR as options. Would you like pricing for just the EDR and the optional pricing for EDR+MDR?

Response: Specifications are shared in the RFP, specifically EDR/MDR option and Full MDR option. Additional options/recommendations may be included in your response.

Posted: 3/6/2023

Question: Would you like a formal proposal response or would you prefer us just upload the proposal form and the questionnaire spreadsheet?

Response: The proposal form and questionnaire spreadsheet are required. A formal proposal response may be submitted also.

Posted: 3/6/2023

Question: What tools are currently being used for these services?

Response: All information is included in the response, if information regarding current tools are not included, this is to ensure confidentiality.

Posted: 3/6/2023

Question: What is liked/disliked about current tools that is prompting the RFP?

Response: All information is included in the response, if information regarding current tools are not included, this is to ensure confidentiality.

Posted: 3/6/2023

Question: What is driving the July1 completion date? -- ie Are current licenses expiring then?

Response: This is our current timeline.

Posted: 3/6/2023

Question: What is the team evaluating submissions?

Response: Here is the timeline regarding the RFP… Release RFP for EDR/MDR Services February 27 Vendor Bid Submission Due March 14 Evaluate Submissions (including Proof of Concept) March / April Submit Recommendation to Board of Education April 20 Implementation May/June Project Completion July 1

Posted: 3/6/2023

Question: Is there a scorecard being used to evaluate submissions? If so, can you share?

Response: Completion of Proposal Fulfills Requirements Deliverables Experience / Referrals Qualifications Price of Eligible Goods and Services

Posted: 3/6/2023

Question: What does the security team for Wentzville look like today? Are there plans to add new internal resources?

Response: All information is included in the response or located on the district website.

Posted: 3/7/2023

Question: "Will a vendor be precluded from consideration if they can't offer both the EDR and patch/vulnerability mgmt offerings today? How long does Wentzville SD want to retain its EDR data, understanding there is a cost component to a longer retention period? Assuming you'd like all vendors to quote the same length of time for data retention." “Does a vendor need to meet SPEC-1 and SPEC-2 and SPEC-3 to be considered for this RFP, or will you consider selecting multiple vendors to fulfil the varying requirements of the RFP (the “SPEC-X” sections)?”

Response: -We welcome all submissions and solutions. -At a minimum, we would like to keep EDR data for 6 months, recommended is 1 year. -We welcome all submissions and solutions.