Mooresville Town Opengov #325209

Mooresville Managed SOC/SIEM and Mandatory NDR Services

The Town of Mooresville is seeking a managed cybersecurity service to protect its municipal technology environment, including CJIS-scoped systems. - Buyer: Town of Mooresville, Innovation Technology Department, North Carolina. - Services requested: 24x7x365 analyst-led managed SOC and SIEM monitoring, alert investigation and escalation, threat intelligence and hunting, incident-response guidance, dashboards, and reporting. - Mandatory NDR: Monitor both North/South perimeter traffic and East/West internal traffic, with vendors disclosing coverage, architecture, blind spots, sensors, and costs. - Scale and pricing: Provide all-inclusive pricing for 700, 800, and 1,000 combined endpoints and servers, itemizing implementation, recurring services, ingestion and retention, overages, incident response, NDR, AI, and integrations. - Existing platforms and named vendors/OEMs: Adlumin, Microsoft (Azure/Entra ID, Microsoft 365, Defender for Endpoint, and Intune), Cisco (Meraki, Umbrella, and Duo), Palo Alto Networks (firewalls and GlobalProtect VPN), KnowBe4, Mimecast, 1Password, SentinelOne, Darktrace, and CyberMaxx. CyberMaxx-related dependencies include Palo Alto firewalls, Mimecast, and Cisco Duo. Microsoft Defender for Endpoint is identified as a possible SentinelOne replacement, not a required product. - CJIS and incident requirements: Describe CJIS safeguards, personnel and access controls, encryption, MFA, hosting and subprocessors, data retention and deletion, and protections against unauthorized AI training. Critical-incident notification is targeted within 15 minutes or better; containment must follow a defined authorization model. - Transition and AI: Integrate with the current environment and provide a transition plan that avoids monitoring gaps. AI-assisted triage, correlation, hunting, and reporting must have human oversight, auditability, and Town-approved controls; disruptive actions require authorization. - Reporting and experience: Provide monthly operational and executive reporting, and three relevant public-sector or CJIS-regulated customer references. - No specific service provider or mandatory OEM product is selected.

Description

The Town of Mooresville seeks proposals for managed Security Operations Center (SOC), Security Information and Event Management (SIEM), and mandatory Network Detection and Response (NDR) services. The scope includes continuous 24x7x365 monitoring, analyst-led detection and investigation, incident notification and escalation, threat intelligence, reporting, and support for CJIS requirements. The solution must provide North/South and East/West network visibility, integrate with existing security technologies, and support migration from incumbent services without monitoring gaps. Proposers must provide all-inclusive pricing for 700, 800, and 1,000 endpoints and servers, with implementation, integrations, AI capabilities, retention, and other costs disclosed.

View original listing