Project Overview Minnesota State is seeking proposals from qualified vendors to provide forensic investigation services under one or more master contract agreements. These contracts will enable Minnesota State to rapidly engage expert forensic support in the event of a cybersecurity incident involving its systems or data. Selected vendor(s) will be expected to augment internal resources by conducting thorough forensic investigations to determine whether Minnesota State data has been compromised and to what extent. This proposal is for a master contract available to all colleges, universities, and the system office within the Minnesota State system. Participation is optional, and each institution will be responsible for its proportional share of licensing, services, and support costs. Institutions may also choose to pursue alternative solutions independently if this option does not meet their needs or becomes cost-prohibitive. As higher education is experiencing declining enrollment, higher costs and declining State of Minnesota appropriation for higher education; each college and university must find ways of doing more work more efficiently at lower cost while providing improved service to students to close equity gaps and ensure that each student has extraordinary education and training, and are able to perform at their very best. Technical/Functional Requirements Key Responsibilities The vendor(s) must be capable of delivering the following services: Rapid Response: Acknowledge and initiate communication with Minnesota State staff within 4 hours of notification. Be available onsite within 2 business days, if requested. Engagement Planning: Develop a Statement of Work (SOW) for each engagement, outlining the scope, objectives, and deliverables. Forensic Analysis: Perform network and host-based forensic investigations, including database forensics (e.g., audit trails, access logs, destructive queries). Conduct live memory capture and analysis. Analyze system and network logs to identify indicators of compromise. Perform static and dynamic malware analysis. Technical Capabilities: Work across multiple operating systems, including Windows, macOS, Linux, Android, and iOS. Create forensically sound images of affected systems. Ensure chain of custody and evidence handling procedures that meet legal admissibility standards. Remediation Support: Provide immediate recommendations for containment and mitigation. Assist in developing long-term remediation strategies. Reporting: Deliver a comprehensive report detailing investigative findings, methodologies, and conclusions. Selection Process The selection process includes an evaluation of all qualified proposals. Minnesota State will select the Vendor(s) whose proposal(s), and follow up interviews if requested, demonstrate in Minnesota State’s sole opinion, the clear capability to best fulfill the purposes of this RFP cost-effectively. Minnesota State reserves the right to accept or reject proposals, in whole or in part, and to negotiate separately as necessary to serve the best interests of Minnesota State. This RFP shall not obligate Minnesota State to award Master Contract(s) or complete the proposed project, and it reserves the right to cancel this RFP if it is in its best interest. Evaluation Factors The following factors and their identified weight will be used to evaluate the responses: Topic Factor Weight Adherence to Minnesota State Terms and Conditions. A statement of the objectives, goals, and tasks to show or demonstrate its view and understanding of the nature of the contract 5 Work Plan. A description of the deliverables to be provided by the Responder along with a detailed work plan that identifies the major tasks to be accomplished and be used as a scheduling and managing tool, as well as the basis for invoicing. 25 Cost/Value. Identify the level of the participation of Minnesota State in the contract, as well as any other services to be provided by Minnesota State, and details of cost allowances for this participation. 25 Qualifications of Respondent and its personnel. An outline of the Responder’s background and experience with examples of similar work complete by the Responder and a list of personnel who will conduct the project, detailing their training, and work experience. Resumes or other information about project personnel should not, if possible, contain personal telephone numbers, home addresses or home email addresses. If it is necessary to include personal contact information, please clearly indicate in the proposal that personal contact information is being provided. 30 Completeness, thoroughness and detail of the response Completeness, thoroughness and detail of the response as reflected by the proposal's discussions and coverage of all elements of work listed above 15 Total: 100 Minnesota State reserves the right to name a date which all responding Respondents will be invited to present demonstrations or participate in an interview. Minnesota State does not agree to reach a decision by any certain date although it is hoped the evaluation and selection will be completed by the contract terms date identified. Contract Terms Minnesota State desires to enter into a contract with the successful Respondent(s) effective 10/8/2025 or on the date the last recognized signature is obtained, whichever occurs later. The length of such contract(s) will be 3 years. If Minnesota State and Respondent are unable to negotiate and sign a contract by 10/1/2025 then Minnesota State reserves the right to seek an alternative Respondent(s). Inquiries and Submission Instructions Minnesota State accepts all questions and bid submissions exclusively through Minnesota State's e-procurement system. Hard copy submissions, emails, or submissions through any other medium will not be considered. Each Respondent is solely responsible for the timely delivery of its questions and bids by the RFx date and time deadlines. Failure to meet the deadlines shall be grounds for rejection. Interview and Presentations Minnesota State will conduct interviews with the Key Personnel/Teams from a each of the Shortlisted Responders on 09/24/2025 and 09/25/2025. All presentations are scheduled on a first come, first served basis. Minnesota State reserves the right to name a date which all responding Responders will be invited to present demonstrations or participate in an interview.
