Wentzville R-IV School District Sealed Solicitation

Title: Information Security Development and Monitoring RFP-T-337

Deadline: 9/5/2023 10:00 AM   (UTC-06:00) Central Time (US & Canada)

Status: Cancelled

Solicitation Number: RFP-T-337

Description: The purpose of this Request for Proposal (RFP) is to select;
A solution to provide scheduled and unscheduled assistance and support to the organization’s information technology leadership.  


Documents:

Documents as of 8/14/2023
Login to view documents
Addition 1

Posted: 9/5/2023

Type of Addition: In Review

Addition 2

Posted: 9/14/2023

Type of Addition: Cancellation Information

Overview: This will be re-bid.

Question 1

Posted: 8/22/2023

Question: Number of employees in an organization? What existing Endpoint protection product are you currently using, or would the district be implementing a new product? Please clarify the last bullet/sub-bullets of the RFP. Is the district looking for notification, updates and advisories on the sub-bullets of the RFP? Or is the district looking for management and implementation of the sub-bullets listed in the RFP? Timely notifications of products updates and advisories via email and/or conference call solution meets the needs that many cybersecurity insurance providers requires or organizations to obtain and maintained cybersecurity insurance and coverage such as Ensure multifactor authentication (MFA) implementation o Ensuring backups and disaster recovery solution implementation o Endpoint detection and response o Training and planning o Processes in place to segregate end-of-life software and hardware from the network and decommission in a timely manner o Ensuring email filtering tool implementation o Ensuring privileged access account security measures o Cyber Incident disaster recovery and incident response plan implementation o Ensuring proper domain control configuration on all managed endpoints.

Response: Number of employees in an organization? About 3000 What existing Endpoint protection product are you currently using, or would the district be implementing a new product? Sentinel One Please clarify the last bullet/sub-bullets of the RFP. Is the district looking for notification, updates and advisories on the sub-bullets of the RFP? Management of all the sub bullets in the RFP Or is the district looking for management and implementation of the sub-bullets listed in the RFP? Management of all the sub bullets in the RFP

Question 2

Posted: 8/23/2023

Question: Is the IT organization centralized or decentralized?

Response: Centralized

Question 3

Posted: 8/23/2023

Question: What is WSD’s budget for this project?

Response: The budget is adequate for the needs of the project.

Question 4

Posted: 8/23/2023

Question: For the external vulnerability scanning and penetration tests, approximately how many IPs are active?

Response: We have two different external ips x.x.x./24

Question 5

Posted: 8/23/2023

Question: For the internal network assessment, approximately how many IPs or subnets are in scope?

Response: 2 subnets x.x.0.0 each 1 subnet x.x.x/24

Question 6

Posted: 8/23/2023

Question: Are there documented IT policies, procedures, standards, and guidelines in place? If so, how many?

Response: yes.

Question 7

Posted: 8/23/2023

Question: How many fulltime IT staff are there?

Response: 30

Question 8

Posted: 8/23/2023

Question: For pricing, can vendors provide an hourly rate for all services listed within the RFP?

Response: No.

Question 9

Posted: 8/23/2023

Question: The RFP requests “initial and ongoing assessments, with regularly scheduled remote and/or onsite meetings.” What is the scope of the initial assessment?

Response: Complete Internal and external. May be done remotely.

Question 10

Posted: 8/23/2023

Question: Is a formal incident response plan in place?

Response: No.

Question 11

Posted: 8/23/2023

Question: 1. I see you have a large technology staff, will they be used as onsite support for this contract? 2. What BCDR solution do you currently have in place, and will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? 3. This is not explicitly covered in the RFP, but do you have a firewall solution? If so, will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? 4. Do you have a count on how many servers, switches, APs, printers, and any other network devices will need to be managed? 5. Regarding your 1:1 initiative, do you want these devices to be managed as well? If so, how many devices are there?

Response: 1. I see you have a large technology staff, will they be used as onsite support for this contract? Yes 2. What BCDR solution do you currently have in place, and will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? We will use our own 3. This is not explicitly covered in the RFP, but do you have a firewall solution? If so, will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? We will use our firewall 4. Do you have a count on how many servers, switches, APs, printers, and any other network devices will need to be managed? No at this time 5. Regarding your 1:1 initiative, do you want these devices to be managed as well? If so, how many devices are there? No

Question 12

Posted: 8/24/2023

Question: How many Windows, Mac, Linux, and Chrome machines do you have?

Response: approximately 20,000

Question 13

Posted: 8/24/2023

Question: How many Windows, Mac, Linux and Chrome machines are staff and student?

Response: Approximately 17000 students and 3000 staff

Question 14

Posted: 8/24/2023

Question: Do you have MFA in place now and if so, what is it and how many devices is it on?

Response: Yes.

Question 15

Posted: 8/24/2023

Question: Are you running MFA on Chrome devices or plan to?

Response: No

Question 16

Posted: 8/24/2023

Question: Do you have disaster recovery in place now or do we need to provide the hardware for it?

Response: No need to supply hardware

Question 17

Posted: 8/24/2023

Question: Do you have any email filtering in place now, if so, what is it?

Response: Gmail

Question 18

Posted: 8/24/2023

Question: Of the 20,000 total devices, how many are Chrome?

Response: An estimated 12,000

Posted: 9/5/2023

Type of Addition: In Review

Posted: 9/14/2023

Type of Addition: Cancellation Information

Overview: This will be re-bid.

Posted: 8/22/2023

Question: Number of employees in an organization? What existing Endpoint protection product are you currently using, or would the district be implementing a new product? Please clarify the last bullet/sub-bullets of the RFP. Is the district looking for notification, updates and advisories on the sub-bullets of the RFP? Or is the district looking for management and implementation of the sub-bullets listed in the RFP? Timely notifications of products updates and advisories via email and/or conference call solution meets the needs that many cybersecurity insurance providers requires or organizations to obtain and maintained cybersecurity insurance and coverage such as Ensure multifactor authentication (MFA) implementation o Ensuring backups and disaster recovery solution implementation o Endpoint detection and response o Training and planning o Processes in place to segregate end-of-life software and hardware from the network and decommission in a timely manner o Ensuring email filtering tool implementation o Ensuring privileged access account security measures o Cyber Incident disaster recovery and incident response plan implementation o Ensuring proper domain control configuration on all managed endpoints.

Response: Number of employees in an organization? About 3000 What existing Endpoint protection product are you currently using, or would the district be implementing a new product? Sentinel One Please clarify the last bullet/sub-bullets of the RFP. Is the district looking for notification, updates and advisories on the sub-bullets of the RFP? Management of all the sub bullets in the RFP Or is the district looking for management and implementation of the sub-bullets listed in the RFP? Management of all the sub bullets in the RFP

Posted: 8/23/2023

Question: Is the IT organization centralized or decentralized?

Response: Centralized

Posted: 8/23/2023

Question: What is WSD’s budget for this project?

Response: The budget is adequate for the needs of the project.

Posted: 8/23/2023

Question: For the external vulnerability scanning and penetration tests, approximately how many IPs are active?

Response: We have two different external ips x.x.x./24

Posted: 8/23/2023

Question: For the internal network assessment, approximately how many IPs or subnets are in scope?

Response: 2 subnets x.x.0.0 each 1 subnet x.x.x/24

Posted: 8/23/2023

Question: Are there documented IT policies, procedures, standards, and guidelines in place? If so, how many?

Response: yes.

Posted: 8/23/2023

Question: How many fulltime IT staff are there?

Response: 30

Posted: 8/23/2023

Question: For pricing, can vendors provide an hourly rate for all services listed within the RFP?

Response: No.

Posted: 8/23/2023

Question: The RFP requests “initial and ongoing assessments, with regularly scheduled remote and/or onsite meetings.” What is the scope of the initial assessment?

Response: Complete Internal and external. May be done remotely.

Posted: 8/23/2023

Question: Is a formal incident response plan in place?

Response: No.

Posted: 8/23/2023

Question: 1. I see you have a large technology staff, will they be used as onsite support for this contract? 2. What BCDR solution do you currently have in place, and will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? 3. This is not explicitly covered in the RFP, but do you have a firewall solution? If so, will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? 4. Do you have a count on how many servers, switches, APs, printers, and any other network devices will need to be managed? 5. Regarding your 1:1 initiative, do you want these devices to be managed as well? If so, how many devices are there?

Response: 1. I see you have a large technology staff, will they be used as onsite support for this contract? Yes 2. What BCDR solution do you currently have in place, and will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? We will use our own 3. This is not explicitly covered in the RFP, but do you have a firewall solution? If so, will this solution continue to be utilized during the contract or would you prefer that the contract vendor use their own solution? We will use our firewall 4. Do you have a count on how many servers, switches, APs, printers, and any other network devices will need to be managed? No at this time 5. Regarding your 1:1 initiative, do you want these devices to be managed as well? If so, how many devices are there? No

Posted: 8/24/2023

Question: How many Windows, Mac, Linux, and Chrome machines do you have?

Response: approximately 20,000

Posted: 8/24/2023

Question: How many Windows, Mac, Linux and Chrome machines are staff and student?

Response: Approximately 17000 students and 3000 staff

Posted: 8/24/2023

Question: Do you have MFA in place now and if so, what is it and how many devices is it on?

Response: Yes.

Posted: 8/24/2023

Question: Are you running MFA on Chrome devices or plan to?

Response: No

Posted: 8/24/2023

Question: Do you have disaster recovery in place now or do we need to provide the hardware for it?

Response: No need to supply hardware

Posted: 8/24/2023

Question: Do you have any email filtering in place now, if so, what is it?

Response: Gmail

Posted: 8/24/2023

Question: Of the 20,000 total devices, how many are Chrome?

Response: An estimated 12,000