Data Security Posture Management Solution for Data Discovery, Classification, and Risk Monitoring

The City of Raleigh is seeking proposals for a Data Security Posture Management (DSPM) solution designed to enhance its information security by providing comprehensive visibility, classification, and ongoing protection of sensitive data across on-premises, cloud, and SaaS environments. The contract aims to deliver automated discovery and classification of both structured and unstructured data, continuous risk assessment based on data sensitivity and access patterns, and real-time monitoring to prevent unauthorized access, movement, or exposure. The solution must integrate seamlessly with existing security tools and governance frameworks, support compliance with applicable regulations, and generate actionable insights through detailed reporting. The project scope emphasizes industry standards such as NIST SP 800-61 and 800-53, and requires annual third-party security audits like SOC 2 Type II or ISO 27001, ensuring robust security and compliance measures. The procurement process is governed by the City’s standard terms, incorporating local codes and applicable laws, including North Carolina’s public records law. The contract will be awarded based on a comprehensive evaluation of proposals, emphasizing project understanding, team experience, corporate background, and cost, with a weighted scoring system that prioritizes technical approach and team qualifications. Proposals must be submitted electronically as PDFs by October 21, 2025, with detailed cost breakdowns provided via a Proposal Cost Form. The contract will specify the period of performance, which is not detailed in the RFP but will be outlined in the final agreement. The City emphasizes security, personnel qualifications, and compliance, requiring annual security audits, detailed staffing plans, and certifications related to conflict of interest laws. Payment terms are NET 30 days upon invoice submission, with invoices to be sent electronically to the City’s accounts payable. Overall, the contract reflects a comprehensive approach to selecting a qualified vendor capable of delivering a secure, compliant, and effective DSPM platform aligned with the City’s strategic data security objectives.