RFP DOT 2025-067 Managed Security Service Provider (MSSP)
Open
2025-067State & Local
Response Deadline
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
AI Contract Overview
Show more
The New Hampshire Department of Transportation (NHDOT) is seeking a Managed Security Service Provider (MSSP) to provide 24/7 cybersecurity monitoring, threat detection, and incident response for its Bureau of Transportation Systems Management and Operations (TSMO) and Transportation Management Center (TMC). The scope of work focuses on protecting critical operational technology (OT) and Intelligent Transportation Systems (ITS) infrastructure, including traffic signals, Smart Work Zones, and associated wired and wireless communication networks. The selected vendor will supplement the NH Department of Information Technology (NH DoIT) team by ensuring operational resilience and compliance with state and federal security standards, specifically NIST SP 800-171 R3 and NIST SP 800-53 Revision 5.
The contract is structured as a not-to-exceed agreement with a projected five-year performance period. Key requirements include the provision of specialized field technician support equipped with necessary network diagnostic tools and the adherence to strict Service Level Agreements (SLAs) for incident triage, mitigation, and resolution. Evaluation is based on a weighted scoring system rather than a low-bid award, prioritizing the proposed technical solution and the vendor's project management experience. Vendors must maintain significant insurance coverage, including cyber liability of up to 10 million dollars in the aggregate, and demonstrate compliance with GovRAMP or StateRAMP authorizations. Proposals are due by November 17, 2026.
General Info
NHDOT seeks an MSSP for 24/7 cybersecurity monitoring of critical OT and ITS infrastructure.
XLSX, High priority: read this first18 pages · specifications
HighAI Summary for Addendum 5 Attachment 6 - Table E Pricing Worksheet: A comprehensive pricing worksheet (Table E) provided as part of Addendum 5. It contains detailed bid schedules for activities, deliverables, milestones, hardware, software licensing, hosting, and maintenance over a 5-year contract period, including a final implementation pricing summary and future vendor rates.
XLSX
XLSX, High priority: read this first5 pages · specifications
HighAI Summary for DOT Attachment1 Table B-2.1 MSSP System Requirements: This document is Table B-2.1 from a DOT attachment detailing MSSP (Managed Security Service Provider) system requirements. It outlines critical and optional security monitoring, threat detection, vulnerability management, incident response, access control, data protection, and security awareness training requirements for the proposed solution. The requirements emphasize continuous 24/7/365 monitoring, real-time event correlation, ITS-specific threat detection, vulnerability scanning, incident response tailored to transportation systems, privileged access management, data loss prevention, and specialized cybersecurity training for ITS operators and field technicians. The document serves as a technical specification for the security capabilities expected from the MSSP solution.
XLSX
XLSX, High priority: read this first18 pages · pricing-worksheet
HighAI Summary for DOT Attachment 6 - Table E Pricing Worksheet: This document is a pricing worksheet for a DOT project, organized into multiple sheets detailing various cost categories. It includes pricing for activities, deliverables, milestones, hardware, tools, equipment, software licenses, monitoring, operations, maintenance, support, hosting, critical issues field services, other costs, and a cost summary. The worksheet also contains future vendor rates and optional features pricing. The document is structured to support a 5-year contract period with detailed cost breakdowns by year and category, facilitating comprehensive budget planning and proposal pricing.
PDF
PDF, High priority: read this first22 pages · rfp
HighAI Summary for MSSP RFP DOIT 2026-067 Vendor Conference Slides: Vendor conference slides for New Hampshire DOT’s Managed Security Service Provider (MSSP) RFP DOIT 2026-067, dated 8/7/2026. The presentation summarizes project background, goals, proposal submission requirements, evaluation criteria, contract terms, appendices, and business/technical requirements. It notes the RFP closing date of 10/13/2026 at 3:00 PM, references pricing worksheets and requirement tables, and explains that the awarded contract is intended to support TSMO/TMC cybersecurity and field network operations.
DOCX
DOCX, High priority: read this first1 page · rfi
HighAI Summary for NHDoIT RFP 2025-067 Managed Security Service Provider RFI Form: This document is a Request For Information (RFI) form related to NHDoIT RFP 2025-067 for a Managed Security Service Provider (MSSP). It is addressed to Nicholas King and includes fields for referencing design documents, RFP page numbers, requirement numbers, appendix numbers, and other details. The form is intended to capture inquiries, including title, details, estimated cost impact, and schedule impact, facilitating communication and clarification during the procurement process.
PDF
PDF, High priority: read this first1 page · amendment
HighAI Summary for NHDOT RFP DoIT 2025-067 Addendum #4 - Schedule Modification: Addendum #4 for the State of New Hampshire Department of Transportation's RFP DoIT 2025-067 (Managed Security Service Provider). This document modifies the procurement schedule, extending the proposal due date to November 17, 2026, at 3:00 PM ET, and updating the timeline for vendor inquiries and selection milestones.
PDF
PDF, High priority: read this first3 pages · sow
HighAI Summary for NHDOT RFP DoIT 2025-067 Appendix B-2.3.1 Incident Response: This document is Appendix B-2.3.1 Incident Response for the New Hampshire Department of Transportation RFP DoIT 2025-067 for a Managed Security Service Provider (MSSP). It outlines the structured approach for handling cybersecurity incidents affecting NHDOT ITS network and field systems. The appendix defines incident categories (Critical, High Priority, Routine), response expectations, communication protocols, and resolution standards aligned with NHDOT operational priorities and SLA-6. It includes an Incident Response Workflow detailing communication flow, response levels, escalation procedures, and response time requirements for different incident severities. The document sets specific initial response, service response, and resolution times for each incident type, emphasizing coordination with NH DoIT and TSMO Bureau staff to ensure timely isolation, investigation, recovery, and documentation of incidents.
PDF
PDF, High priority: read this first84 pages · rfp
HighAI Summary for NHDOT RFP DoIT #2025-067 Managed Security Service Provider (MSSP) - Addendum 5: Request for Proposal (RFP) issued by the New Hampshire Department of Transportation (NHDOT) for a Managed Security Service Provider (MSSP). The document, incorporating Addendum 5, seeks a vendor to provide 24/7 cybersecurity monitoring, incident response, and field network support for the TSMO Bureau and Intelligent Transportation Systems (ITS) infrastructure. Key requirements include NIST compliance, threat detection, and technical support for field-deployed network equipment. Proposal due date is November 17, 2026.
PDF
PDF, High priority: read this first86 pages · rfp
HighAI Summary for NHDOT RFP DoIT #2025-067 Managed Security Service Provider (MSSP) - Addendum 6: Request for Proposal (RFP) issued by the New Hampshire Department of Transportation (NHDOT) for a Managed Security Service Provider (MSSP). The goal is to provide 24/7 cybersecurity monitoring, incident response, and field network support for the TSMO Bureau and Intelligent Transportation Systems (ITS) infrastructure. This document incorporates Addendum 6 (issued November 4, 2026) and specifies a proposal due date of November 17, 2026.
PDF
PDF, High priority: read this firstamendment
HighAI Summary for NHDOT RFP DoIT 2025-067 MSSP Addendum #6: Addendum #6 for the New Hampshire Department of Transportation's Managed Security Service Provider (MSSP) solicitation. It provides responses to a second round of vendor inquiries, clarifies technical proposal table requirements, provides a secure ShareFile link for submissions, and outlines 14 specific modifications to the RFP, including updating references from StateRAMP to GovRAMP and revising scoring for authorization status. The proposal submission deadline is noted as November 17, 2026.
PDF
PDF, High priority: read this first4 pages · amendment
HighAI Summary for RFP DoIT 2025-067 Addendum #1 – Vendor Conference Responses: State of New Hampshire Department of Transportation RFP DoIT 2025-067 for Managed Security Service Provider (MSSP), Addendum #1. Dated after the mandatory vendor conference held August 7, 2026, this addendum provides responses to vendor questions, notes conference materials and attendee roster attachments, and revises the RFP. Key changes include corrections and additions to SLA language in Table B-2.3 and revised Appendix B and Attachment 4. It also clarifies proposal submission requirements, bid bond status, monitoring tools, off-hours field response, and the mandatory conference attendance requirement.
PDF
PDF, High priority: read this first1 page · amendment
HighAI Summary for RFP DoIT 2025-067 Addendum #2: State of New Hampshire Department of Transportation Addendum #2 to RFP DoIT 2025-067, Managed Security Service Provider (MSSP). The addendum clarifies the vendor inquiry process and timing for responses, stating there is no early vendor inquiry deadline in the Schedule of Events. It explains that questions received through August 17, 2026 were answered in Addendum #1, and questions received after that date through the vendor inquiry period ending September 22, 2026 are expected to be answered on or about October 2, 2026.
PDF
PDF, High priority: read this first1 page · amendment
HighAI Summary for RFP DoIT 2025-067 Addendum #3 - Managed Security Service Provider: Addendum #3 for the State of New Hampshire Department of Transportation's RFP DoIT 2025-067 regarding Managed Security Service Provider (MSSP) services. This document modifies the procurement schedule, extending the proposal due date to November 5, 2026, and establishing an extended vendor inquiry period. It also updates the Proposal Transmittal Form Letter.
PDF
PDF, High priority: read this first4 pages · sow
HighAI Summary for RFP DoIT 2025-067 Appendix B-2.3.1 Incident Response: This document is a supplemental appendix to RFP DoIT 2025-067 for a Managed Security Service Provider (MSSP) for the Department of Transportation. It defines the structured approach for handling cybersecurity incidents affecting NHDOT ITS networks, including incident classifications (Critical, High Priority, and Routine) and specific performance metrics for Time to Triage (TTT), Time to Initial Mitigation (TIM), and Time to Resolve (TTR).
PDF
PDF, High priority: read this first13 pages · sow
HighAI Summary for RFP DoIT #2025-067 Managed Security Service Provider (MSSP): Appendix B to State of New Hampshire RFP DoIT #2025-067, Managed Security Service Provider (MSSP), issued July 13, 2026 and revised by Addendum 1 on August 27, 2026. This document contains the business/technical requirements and deliverables for the MSSP, functioning as a statement of work. It describes cybersecurity monitoring, threat detection, incident response, vulnerability assessment, network protection, compliance support, field and network support for transportation OT/ITS assets, certifications, log retention, reporting, training, and SLA expectations. It also includes instructions for vendors to complete mandatory, expected, and optional requirements tables.
PDF
PDF, High priority: read this first26 pages · amendment
HighAI Summary for RFP DoIT 2025-067 Managed Security Service Provider (MSSP) Addendum #5: Addendum #5 for RFP DoIT 2025-067 regarding Managed Security Service Provider (MSSP) services. This document provides responses to vendor inquiries and outlines significant modifications to the RFP, including a revised proposal due date of November 17, 2026. Key updates include changes to the Scope of Work, Service Level Agreements (SLAs), incident response protocols, pricing worksheets (Appendix E), and technical requirements for field operations and asset management.
PDF
PDF, High priority: read this first83 pages · rfp
HighAI Summary for RFP DoIT #2025-067 Managed Security Service Provider (MSSP) - New Hampshire DOT: This Request for Proposal (RFP) DoIT #2025-067 issued by the New Hampshire Department of Transportation (NHDOT) seeks qualified vendors to provide Managed Security Service Provider (MSSP) services. The RFP, dated July 13, 2026, outlines the need for continuous cybersecurity monitoring, incident detection and response, and technical support for the Bureau of Transportation Systems Management and Operations (TSMO) and the Transportation Management Center (TMC). The MSSP will support the security and operational resilience of the Intelligent Transportation Systems (ITS) infrastructure, including field devices and network equipment, ensuring compliance with federal and state cybersecurity standards. Key components include 24/7 monitoring, technical field support, standards compliance, documentation, and ITS integration. The proposal due date is October 13, 2026, with a vendor conference scheduled for August 7, 2026.
PDF
PDF, High priority: read this first2 pages · sow
HighAI Summary for RFP DoIT 2025-067 MSSP Field Technician Support Equipment Appendix E-1.2.1: This document is Appendix E-1.2.1 of RFP DoIT 2025-067 for a Managed Security Service Provider (MSSP) issued by the New Hampshire Department of Transportation. It details the Statement of Work (SOW) for MSSP field technician support equipment. The appendix specifies the tools and equipment the vendor must furnish, maintain, and calibrate for network diagnostics, cabling, power, and general hardware. Key items include laptops with network analysis software, cable testers, fiber optic test kits, power testers, hand tools, communication devices, and safety equipment. The document ensures field technicians are properly equipped to troubleshoot, diagnose, repair, and maintain network and communication infrastructure, excluding ITS equipment. This version is a supplemental appendix to the main RFP.
PDF
PDF, High priority: read this first11 pages · contract-document
HighAI Summary for RFP DOIT 2025-067 Standard Contract Form: This document is the standard contract form for RFP DOIT 2025-067 issued by the State of New Hampshire. It outlines the general provisions of the agreement between the State and the contractor, including identification details, services to be performed, effective date and completion of services, conditional nature of the agreement based on funding availability, contract price and payment terms, compliance with laws and regulations, and personnel requirements. The contract becomes effective upon approval by the Governor and Executive Council or upon signing if no approval is required. It includes references to attached exhibits for detailed descriptions of services and payment terms. The document emphasizes compliance with equal employment opportunity laws and other applicable regulations.
XLSX
XLSX, High priority: read this first8 pages · sow
HighAI Summary for RFP DOIT 2025-067 – Table B-2.2 and B-2.3 Revised: Revised attachment for RFP DOIT 2025-067 containing Table B-2.2 technical requirements and Table B-2.3 service level agreement terms. The document lists vendor response requirements for prohibited technologies, security compliance (NIST 800-171, NIST 800-53), StateRAMP/FedRAMP/HITRUST options, hosting platform approvals, IT accessibility/VPAT requirements, and SLA provisions covering support, maintenance, patching, availability, and incident response. The filename indicates this is an addendum attachment and revised version.
XLSX
XLSX, High priority: read this first8 pages · specifications
HighAI Summary for RFP DOIT 2025-067 Table B-2.2 and Table B-2.3: This document is Addendum 5, Attachment 4 for RFP DOIT 2025-067. It contains detailed technical and service requirements across two tables: Table B-2.2, which outlines prohibited technologies, security compliance (NIST 800-171, 800-53), StateRAMP authorization, and accessibility (WCAG 2.1) requirements; and Table B-2.3, which defines Service Level Agreement (SLA) requirements including system maintenance, patching timelines, and technical support availability.
XLSX
XLSX, High priority: read this first8 pages · specifications
HighAI Summary for RFP DOIT 2025-067 Table B-2.2 and Table B-2.3: This document is Addendum 6, Attachment 4 for RFP DOIT 2025-067. It contains detailed technical and service requirements across two tables: Table B-2.2 focuses on technical compliance, including prohibited technologies, NIST security standards (800-171, 800-53), GovRAMP authorization, and WCAG 2.1 accessibility. Table B-2.3 outlines Service Level Agreement (SLA) requirements regarding system maintenance, patching timelines, support hours, and uptime availability.
XLSX
XLSX, High priority: read this first8 pages · sow
HighAI Summary for RFP DOIT 2025-067 Technical and SLA Requirements Tables: This document contains Tables B-2.2 and B-2.3 from RFP DOIT 2025-067, detailing technical requirements and service level agreements (SLA) for a vendor contract. Table B-2.2 outlines critical technical compliance requirements including prohibited technologies, security compliance per NIST standards, StateRAMP authorization, alternative certifications like FedRAMP and HITRUST, hosting platform approvals, and IT accessibility standards. Table B-2.3 specifies SLA terms such as system support duration, maintenance obligations, repair and replacement responsibilities, patch management timelines, vendor technical support availability, incident response commitments, and hosting server availability. The document is essential for vendor response preparation and contract compliance.
DOCX
DOCX, High priority: read this first2 pages · transmittal-letter
HighAI Summary for RFP DOT 2025-067 Managed Security Service Provider Proposal Transmittal Letter: This document is a Proposal Transmittal Form Letter for the State of New Hampshire's RFP DOT 2025-067, inviting proposals for Managed Security Service Provider (MSSP) services. It includes company and contact information fields, attests to compliance with the RFP terms, and certifies no disqualifying legal or ethical issues per RSA 21-I:11-c. The letter requires an authorized signature to confirm acceptance of all State terms and conditions and nullification of any conflicting vendor terms. The proposal due date is October 13, 2026, at 3:00 PM ET.
DOCX
DOCX, High priority: read this first2 pages · submission-form
HighAI Summary for RFP DOT 2025-067 - Proposal Transmittal Form Letter: A revised proposal transmittal form for the State of New Hampshire's Managed Security Service Provider (MSSP) procurement (RFP DOT 2025-067). The document serves as a formal offer and certification of compliance, including attestations regarding non-collusion, debarment status, and acceptance of state terms and conditions. Proposal due date is November 17, 2026.
DOCX
DOCX, High priority: read this first2 pages · amendment
HighAI Summary for RFP DOT 2025-067 - Proposal Transmittal Form Letter: A revised Proposal Transmittal Form Letter for the State of New Hampshire's Managed Security Service Provider (MSSP) procurement (RFP DOT 2025-067). This document serves as the official offer submission form, requiring vendor certification of compliance with RFP terms, non-collusion, and legal eligibility under RSA 21-I:11-c. Proposal due date is November 5, 2026.
XLSX
XLSX, High priority: read this first5 pages · specifications
HighAI Summary for Table B-2.1 MSSP System Requirements: This document is an attachment to Addendum 5, detailing the technical system requirements for a Managed Security Service Provider (MSSP) for NHDOT. It includes a detailed requirements matrix covering security monitoring, threat detection, vulnerability management, incident response, and ITS-specific operational technology security.
AI Contract Breakdown
Uniform Contract Format
Sign up to view the full breakdown with detailed analysis of each section.
Timeline
2 updates
PhaseSolicitation
Posted
Solicitation
Deadline changed
Response deadline changed from Oct 13, 2026 to Nov 17, 2026.
Notice updated
The notice title changed.
Response Deadline
Submission deadline
Response Deadline
Ready to pursue this opportunity?
Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.
Organization & Contact Information
Show more
AgencyNew Hampshire → Department Of Transportation
The NHDOT intends, through this Request for Proposal (RFP), to seek proposals from qualified vendors to provide managed security services and field service to support NHDOT’s TSMO Bureau and TMC operations. The MSSP Vendor will supplement the current NHDoIT team assigned to the NHDOT TSMO Bureau by providing specialized cybersecurity services and field network support to ensure compliance with state and federal security requirements, maintain operational resilience, and protect critical ITS infrastructure and devices.
