Cybersecurity & Information Security Services

The State of Idaho, in partnership with the NASPO ValuePoint cooperative purchasing program, is soliciting proposals to establish Master Agreements for comprehensive Cybersecurity and Information Security Services. This initiative seeks to bolster the cybersecurity defenses of governmental entities not only in Idaho but also across all U.S. states, the District of Columbia, and territories participating through the NASPO ValuePoint program. The procurement process is guided by best practices to ensure robust and reliable solutions. The contract covers a range of critical services: Risk Assessment and Mitigation, Incident Response, Breach Coach support, and Notification and Credit Monitoring. Specialized roles are defined for each service, including senior analysts, consultants, project managers, forensic investigators, and breach coaches, each to be compensated at stipulated hourly rates. Costs for notification and credit monitoring scale according to breach size and affected individuals. A 0.25% administrative fee for NASPO ValuePoint must be included in all proposals. The initial contract term is one year, with the option to extend for up to six years, and services may be delivered in Idaho or extended to other NASPO member states. Bidders are required to meet stringent insurance standards—ranging from $1 million for general liability to $5 million for cyber liability—and maintain all necessary legal qualifications and registrations.