UMGC RFP #92340 - Managed Security Operations Center (SOC) Services

The University of Maryland Global Campus (UMGC) is soliciting proposals for a qualified provider to deliver managed Security Operations Center (SOC) services. The selected contractor will provide 24x7x365 security monitoring, threat detection and analysis, incident response, threat intelligence, and related advisory services. The scope includes continuous monitoring of security events via the University's SIEM tool, the maturation of incident response playbooks, and the provision of as-needed cybersecurity personnel for special projects on a time-and-materials basis. The engagement is for an initial three-year term with two optional one-year renewals, and all services are assumed to be performed in a remote work environment. The contract will be awarded based on a trade-off where technical merit is weighted more heavily than cost. Evaluation criteria include technical approach, relevant experience, staffing, implementation, and contract compliance. Proposers must submit separate technical and price volumes via the Bid Locker portal by November 16, 2026. Key requirements include a minority business enterprise (MBE) subcontracting goal of at least 3%, adherence to NIST SP 800-171 and other regulatory frameworks, and specific insurance coverages, including 5 million dollars per occurrence for cyber security and data breach insurance. Payments are typically issued on a net 30-day basis via electronic funds transfer.