Request for Proposal: AlgoSec Network Security Policy Management Tool Sourcing Event

The North Carolina Department of Information Technology is issuing a solicitation to procure the AlgoSec Network Security Policy Management Tool, with the goal of enhancing the management, visibility, and control of network security policies across a hybrid infrastructure that includes on-premises and cloud environments. The contract is valued between $500,000 and $1,500,000 and will span an initial three-year term with options for two additional one-year extensions. The vendor is expected to deliver a comprehensive solution that includes AlgoSec Firewall Analyzer, hardware appliances, licenses, support, training, and disaster recovery capabilities, compatible with multiple network device platforms such as Cisco, Juniper, Palo Alto, Check Point, Fortinet, and cloud providers like AWS, Azure, and Google Cloud. The solution must support centralized management, automated compliance reporting, risk analysis, policy optimization, and scalability to accommodate future growth. Key contractual provisions include strict data security and confidentiality requirements, with the vendor responsible for safeguarding State Data, ensuring compliance with NIST standards, and prohibiting storage or transfer of non-public State Data outside the U.S. without approval. The contract mandates 24/7 technical support with rapid response times, comprehensive staff training, and detailed provisions for performance acceptance, delivery timelines, and payment terms. Vendors must also adhere to specific AI and Generative AI assessment requirements if such technologies are incorporated, including transparency, bias mitigation, hallucination prevention, and data privacy protocols. The procurement process emphasizes strict adherence to submission deadlines via the Ariba Sourcing Tool, with late offers disqualified, and includes provisions for confidentiality, audit rights, and compliance with applicable laws such as E-Verify and security certifications. Overall, the contract emphasizes a robust security posture, detailed performance metrics, and a clear process for transition and termination, ensuring the State’s interests are protected throughout the procurement and operational lifecycle.