The vendor is required to provide cloud application monitoring and protection service for include:
a. Discovery and visibility:
• Complete discovery and mapping of all applications, files, and users within our google workspace for education and microsoft 365 environments.
• Real-time visibility into user activity, file sharing, and application usage.
• Detailed audit logs and reporting capabilities for compliance and incident response.
• Ability to identify and track third party applications connected to our environments.
b. Threat detection and prevention:
• Advanced threat detection capabilities to identify and prevent:
o Phishing attacks.
o Malware and ransomware.
o Data loss and exfiltration.
o Account takeovers and unauthorized access.
o Insider threats.
o Malicious file sharing.
• Behavioral analytics to detect anomalous user activity.
• Automated threat response and remediation.
• Proactive security alerts and notifications.
c. Data loss prevention (DLP):
• Granular control over sensitive data, including student records, financial information, and intellectual property.
• Policy-based DLP rules to prevent data leakage and unauthorized sharing.
• Content scanning and redaction capabilities.
• Ability to enforce data encryption and access controls.
d. Compliance and reporting:
• Compliance reporting to meet regulatory requirements (e.g., FERPA).
• Customizable reports and dashboards to track key security metrics.
• Possibility to generate forensic reports for incident investigations.
e. Integration and deployment:
• Seamless integration with our existing google workspace for education and microsoft 365 environments and where needed identity
• Management and active directory systems.
• Minimal disruption to user productivity during deployment.
• Comprehensive documentation and training for our information services staff.
• Ongoing support and maintenance.
f. API access and automation:
• Robust API access for integration with our existing security tools where necessary.
• Ability to automate security workflows and incident response where possible.
g. Support and service level agreements (SLAS):
• 24/7 technical support, where possible.
• Clearly defined unbundled SLAS for response times and service availability.
• Regular security updates and patches.
- Vendor requirements
• Demonstrated experience in providing cloud application monitoring and protection services for educational institutions.
• Proven track record of successful deployments of the system for google workspace for education and microsoft 365.
• Strong understanding of relevant compliance regulations (e.g., FRPA).
• Ability to provide comprehensive training and support.
- Contract Period/Term: 1 year
- Questions/Inquires Deadline: May 05, 2025