Managed Security Services Provider (MSSP)

Background

The Maryland State Board of Elections (SBE) is seeking to procure a comprehensive Managed Security Services Provider (MSSP) engagement to enhance its cybersecurity operations, engineering capabilities, and enterprise risk management. The goal is to centralize SBE's cybersecurity functions, eliminate security gaps, improve cyber hygiene, and establish clear roles and responsibilities within the agency. This initiative aims to strengthen governance and protect SBE systems and data.

Work Details

The selected contractor will provide managed security operations, specialized engineering expertise, and strategic advisory services across several functional areas: 1) **Secure Configuration and Compliance:** Conduct automated scanning and assessment using CAP-compliant tools; validate configurations against NIST SP 800-53 Rev. 5, CIS Controls, NIST CSF, CISA, and State requirements; support vulnerability remediation and POA&M tracking. 2) **Application Security:** Perform vulnerability assessments, secure code reviews, integrate security practices into SDLC; provide remediation guidance. 3) **Cybersecurity Engineering:** Assist in the adoption of centralized enterprise security platforms; ensure alignment with agency policies. 4) **Zero Trust Architecture:** Evaluate, plan, deploy Zero Trust solutions; develop a roadmap aligned with modernization goals. 5) **Security Operations Center (SOC):** Develop detection and response capabilities using SIEM; perform real-time triage and forensic investigation. 6) **Technology Risk Management:** Conduct risk assessments; deliver risk registers and mitigation recommendations. 7) **Security Advisory Services:** Provide architectural guidance and recommendations for emerging technologies.

Period of Performance

The contract has a base period of two (2) years with two additional option periods of two (2) years each.

Place of Performance

The primary place of performance is at SBE Headquarters located at 151 West St, Ste 200 Annapolis, MD 21401 or remotely.

Bidder Requirements

This is a Small Business Reserve Procurement limited to certified small businesses as defined by the State Finance and Procurement Article. An overall Minority Business Enterprise (MBE) subcontract participation goal of 10% of the total contract dollar amount has been established for this procurement.