ITES-11085 - USA (Philadelphia, Mississippi) - Managed Cybersecurity Services - Deadline October 28,2026

(1) Vendor needs to provide managed cybersecurity services to the government authority located in Philadelphia, MS. – Function as an extension of the agency's technology and administrative resources and provide both strategic cybersecurity leadership, planning and practical technical support. • Virtual Chief Information Security Officer (vCISO):– Provide an assigned vCISO or equivalent senior cybersecurity executive as the agency's primary strategic cybersecurity advisor.– Conduct an initial cybersecurity program review and establish a twelve–month cybersecurity improvement roadmap.• Security Operations Center (SOC)/managed monitoring: – Provide managed security monitoring and SOC services appropriate for the agency's environment.– Monitor available security telemetry, including endpoint, network, identity, cloud, firewall, email, authentication and other security sources made available by the agency.• Security engineering and technical support: – Provide cybersecurity engineering support to improve configurations, controls, architecture, and defensive capabilities.– Review and assist with security configuration of firewalls, endpoints, servers, network devices, identity systems, email/security controls, backups, remote access, and other applicable technologies.• CPG assessment• Information security policy development/update:– Review the agency's existing information security policies, standards, procedures and related documentation.– Update existing policies or develop missing policies, necessary to support the CPG–aligned cybersecurity program.• Disaster recovery/incident response plan update and tabletop exercise:– Review and update the agency's disaster recovery and incident response plans or develop equivalent plans where absent.– Establish clear roles, responsibilities, notification/escalation procedures, communications procedures, recovery priorities, and coordination requirements.• Recurring security optimization checks: Review security alerts/incidents, review critical monitoring exceptions, identify urgent vulnerabilities or failed controls, escalate material issues, verify critical security services are functioning. • Incident response support: Provide a documented incident intake and escalation process.(2) All the questions must be submitted no later than October 21, 2026.