Notice of Special Procurement - Managed Maintenance Services for Cybersecurity

The contract involves a comprehensive managed cybersecurity maintenance and operational support service for the State of Oregon, awarded through a special procurement process. Originally awarded following a competitive RFP, the agreement with Optiv Security Inc. has been extended and amended to run through December 31, 2035, with a total maximum compensation now reaching approximately 24.7 million dollars. The scope includes incident response, network stabilization, security automation, threat intelligence, and Palo Alto Networks support, with additional value-added services such as security assessments and strategy development. The contract is structured with a five-year base term, with provisions for extensions up to ten years, and incorporates detailed exhibits covering the statement of work, performance metrics, security requirements, and federal and state compliance clauses. It emphasizes strict adherence to federal laws, including civil rights, labor standards, environmental regulations, and cybersecurity security protocols, notably CJIS and FTI requirements, with mandatory personnel security acknowledgments. Pricing is detailed across multiple line items, including an initial setup cost of approximately $301,000, recurring quarterly managed service fees averaging around $738,558, and optional extensions for additional years, with total costs projected to exceed $21.7 million. The contract specifies invoicing procedures, with payments due within 30 days and no explicit shipping or physical delivery terms, as services are primarily remote or on-site at agency locations. Performance and acceptance are conducted by the agency upon review of deliverables, with a 90-day warranty period for correction of deficiencies. The agreement includes unique security clauses mandating CJIS compliance, personnel background checks, breach notification protocols, and confidentiality obligations. It also incorporates standard federal and state legal requirements, anti-organizational conflict provisions, and detailed procedures for contract modifications and extensions, ensuring ongoing compliance and performance standards throughout the contract term.