Cybersecurity & It Support Services

The contract involves providing comprehensive cybersecurity and IT support services to the Greater New Bedford Regional Refuse Management District in Massachusetts, with an estimated value ranging from $50,000 to $150,000. The scope emphasizes advanced cybersecurity protections, including Endpoint Detection & Response, Multi-Factor Authentication, ransomware defense, vulnerability management, email security, and incident response, all aligned with the NIST Cybersecurity Framework. The services are intended to safeguard district systems, ensure business continuity, and maintain compliance with Massachusetts data protection and public records laws. The contract mandates continuous, proactive monitoring and management of approximately 10 monitored devices and 20 email accounts, with data backup requirements for Microsoft Office systems and SharePoint data preserved for at least seven years. While the solicitation encourages vendors to propose service packages and additional recommendations, it does not specify detailed performance schedules, delivery timelines, or fixed contract durations. The legal and regulatory framework governing this contract is primarily based on Massachusetts state laws, specifically those related to public entities and data protection, with no explicit federal FAR clauses or references incorporated. The contract emphasizes adherence to the Massachusetts General Laws and the NIST Cybersecurity Framework, but does not include specific clauses on packaging, marking, inspection, or acceptance procedures, nor does it specify evaluation criteria or award methodologies. Administrative contacts are limited to an accounts payable representative and an executive assistant, with no detailed instructions on invoicing, payment processes, or contract management responsibilities. The documentation does not contain attachments, exhibits, or supporting materials, nor does it specify proposal submission formats, page limits, or media requirements, though responses are due by November 13, 2025. Overall, the contract prioritizes robust cybersecurity measures, compliance, and ongoing monitoring, with flexibility for service package customization and a focus on state law compliance rather than federal procurement clauses.