IDEA1496 NuHarbor Monitoring Splunk

The California Department of State Hospitals is soliciting a one-year remote managed service agreement for Splunk Enterprise Security, supporting up to 100 SVC. The selected vendor will be responsible for implementing security use cases based on the client's threat profile and monitoring system health and security alerts. Key deliverables include biweekly status reports, quarterly performance meetings, and written breach investigation reports delivered to the Chief Information Security Officer and Chief Privacy Officer within ten working days of discovery. All service requests are managed through the vendor's JIRA service desk, and the vendor may utilize proprietary or third-party software to meet these obligations. The contract is awarded based on the lowest net cost quotation, with a 5 percent evaluation preference for California-certified small businesses or non-small businesses with 25 percent small business subcontractor participation. Additional incentives are provided for Disabled Veteran Business Enterprise participation ranging from 3 to 5 percent. Payment terms follow Government Code section 927, with licenses paid annually, hardware maintenance paid monthly in arrears, and warranties paid in full. Due to the nature of the work, the contractor must adhere to strict confidentiality and security standards, including HIPAA, CCPA, and NIST SP 800-63 authentication requirements.