File System and Identity Monitoring

The Public Employees Retirement System of Oregon is soliciting proposals under solicitation number S-45900-00018346 to transition from an on-premises hosting model to a cloud-hosted Varonis Software as a Service (SaaS) solution for file system and identity monitoring. The required subscription includes licensing for 501 Active Directory users, 501 Windows/NAS users, and two collectors. The procurement encompasses all necessary end-user licenses, modules, training, and maintenance and support agreements. The anticipated contract structure consists of an initial three-year term with optional annual renewals extending up to ten years. The selected provider must adhere to rigorous security standards, including CIS Benchmarks, NIST SP 800-88 for data destruction, and NIST CSF and CIS Safeguard requirements for logging, incident response, and business continuity. Maintenance of industry-recognized certifications such as SOC 2, ISO 27001, or FedRAMP is required. Evaluation is based on a 100-point scale, with a 10 percent scoring preference granted to Oregon Small Business Enterprises. Proposals must be submitted via email to Ryan Ellis by the specified deadline and must include a pricing sheet, security certifications, and a detailed implementation methodology. A solution demonstration and a free seven-day trial are also required as part of the evaluation process.