UMGC RFP #92340 - Managed Security Operations Center (SOC) Services

The intent of this Request for Proposals ("RFP" or "Solicitation") is to provide qualified vendors an opportunity to present their qualifications, experience, and conceptual approach to providing the scope of services in relation to the needs of the University of Maryland Global Campus ("the University" or "UMGC").

This Scope of Work defines the scope, responsibilities, deliverables, service levels, and operational requirements for the provision of Managed Security Operations Center (SOC) services by a Managed Security Services Provider (MSSP) for the University of Maryland Global Campus (UMGC).

**3.1. Security Operation Services (SOC).** The MSSP will deliver end-to-end SOC services including:

• 24x7x365 monitoring and analysis of security events using the University’s approved security monitoring platforms and telemetry sources.
• cybersecurity incident detection, triage, escalation, containment, and response coordination.
• improvement of the maturity, consistency, and execution of the University's incident response program.
• optimization and definition of use cases and policies within the existing SIEM platform.
• services that integrate with the University's current security ecosystem, minimizing disruption and maximizing operational efficiency.
• delivery of actionable security reporting, metrics, and insights aligned with the University's risk management objectives, compliance requirements, and operational decision-making needs.
• a Service Operations Manager as the primary point of contact and operational escalation point. This role is considered Key Personnel as defined in the Contract in Appendix C.
• clearly defined reporting structures, documented roles and responsibilities, and performance expectations for all assigned personnel.

**3.2. As-Needed Services and One-Time Projects.** The University may, at its sole discretion, request additional cybersecurity services beyond the routine managed SOC services described above. [...] The University does not guarantee any minimum utilization of services under this section.

**4. Service Expectations.** This section describes the detailed activities expected as part of the routine SOC services: [...]

• Security Monitoring & Detection.
• Incident Response Process Maturation.
• Tooling & Integration.
• Threat Intelligence & Proactive Defense.
• Reporting & Metrics.
• Governance & Communication.

**Submission method:** Technical Proposals must be uploaded electronically at the UMGC Bid Locker link provided. Price Proposals must be uploaded electronically at the UMGC Bid Locker link provided. NO PRICING INFORMATION is to be provided in the Technical Proposal. Proposers must be registered on Bid Locker prior to uploading proposals.

**Due:** Technical and Price Proposals are due **November 16, 2026, at 10:00 AM ET**. Late Proposals will not be considered.

**Contract term:** The contract shall be in effect for an initial term of three (3) years, unless otherwise extended, expired, or terminated pursuant to the Contract. There are two (2), one-year renewal options at UMGC’s sole option.

**MBE goal:** An MBE subcontracting goal of no less than three percent (3%) of the total overall contract value is established for this solicitation.

Insurance:

• Commercial General Liability - One million dollars (**$1,000,000**) combined single limit per occurrence and three million dollars (**$3,000,000**) annual aggregate.
• Cyber Security/Data Breach Insurance – Five million dollars (**$5,000,000**) per occurrence.
• Worker’s Compensation - not to be less than one million dollars (**$1,000,000**) per occurrence.