Managed SOC, SIEM, and NDR Services

The Town of Mooresville is seeking a provider for 24/7 managed SOC and SIEM services with mandatory NDR, CJIS support, and migration from incumbent security services.

Town of Mooresville

General

Status:Open (open)

Due Date:Dec 18, 2026 05:00 PM

Posted Date:Nov 10, 2026 09:26 PM

Contract Period:3 years base + 2 × 1 year options

Type:Request for Proposal (RFP)

Level:Local

Ask AI about this solicitation

ChatGPT Claude Perplexity Grok Gemini

Original Solicitation Links

rfp: managed security operations center (soc), siem, and network detection and response (ndr) services

Submission Instructions

Method:Online

Portal:https://procurement.opengov.com/portal/mooresvillenc

Description

The Town seeks a managed security operations center and SIEM service with mandatory network detection and response (NDR). The scope includes continuous 24/7/365 analyst-led monitoring, alert validation and investigation, threat intelligence, proactive threat hunting, incident notification and escalation, reporting, and centralized collection and correlation of security events across endpoint, identity, cloud, network, email, firewall, and VPN systems. NDR must provide North/South and East/West network visibility. The provider must support CJIS-scoped environments and disclose security controls, data handling, personnel access, subprocessors, and AI capabilities and safeguards. The Town currently has approximately 700–850 endpoints and servers and requests all-inclusive pricing for 700, 800, and 1,000 assets. Proposals must address integrations with the listed existing security technologies, transition from incumbent services without monitoring gaps, implementation and migration plans, service levels, incident response, and data retention and export. Respondents must complete the Vendor Response Matrix, Security and CJIS Questionnaire, and Tiered Pricing Schedule, and provide an implementation schedule, incident response workflow, and three relevant references. The contract term is three years with two optional one-year renewals.

Classification Codes

NAICS541519Other Computer Related Services

PSCDJ10Security and Compliance support delivered as a service, by subscription, or service contract. Includes support of security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.

Title	Date Posted
A - Vendor Response Matrix	Nov 10, 2026 09:26 PM
B - Security and CJIS Questionnaire	Nov 10, 2026 09:26 PM
Project Document	Nov 10, 2026 09:26 PM
RFP:_Managed_Security_Operations_Center_(SOC),_SIEM,_and_Network_Detection_and_Response_(NDR)_Services.pdf	Nov 10, 2026 09:26 PM
C - Tiered Pricing Schedule	Nov 10, 2026 09:26 PM