ITES-11225 - USA (Bowling Green, Kentucky) - Co-Managed IT and Cybersecurity Services - Deadline November 23,2026

(1) Vendor needs to provide co–managed IT and cybersecurity services to the government authority located in Bowling Green, KY.– Provide internal IT staff will maintain day–to–day operations, user support, and administrative access to all systems.– The IT Firm will work alongside internal IT to provide around–the–clock security monitoring and response, endpoint management, Microsoft 365 security management, firewall and network co–management across all county locations, and strategy and compliance support.– Endpoint Management– Keeps agency servers and workstations patched, monitored, and encrypted.• A management agent on all servers and workstations.• Windows operating system patching on a defined schedule, including approval, deployment, fixing failed patches, and monthly compliance reporting. Third–party application patching is not included in this phase.• Device health monitoring (disk, services, availability, agent status) with alerting and response.• Full–disk encryption on servers and workstations using Microsoft BitLocker, which is built into agency existing Windows licensing, with recovery keys stored centrally and accessible to agency.• Identification and reporting of any system that cannot be encrypted (for example, hardware without or a virtual machine without a virtual), with reason and a recommended path to bring it into compliance.• A current hardware and software inventory available to agency on request.• Secure, audited remote access to managed devices for IT Firm and agency technical staff.– Security Operations (24/7/365)• A security operations center (SOC) staffed by human analysts 24 hours a day, 365 days a year.• Managed endpoint detection and response on all servers and workstations. The IT Firm is pre–authorized to take containment actions, such as isolating a device or stopping a malicious process, without waiting for agency approval.• Identity threat detection and response for Microsoft 365: detecting compromised accounts, session or token theft, suspicious sign–ins, and malicious mailbox rules, with the ability to disable accounts and revoke sessions.– Web Protection– Security Awareness and Phishing Training– Microsoft 365 Security Management