The Vendor is required to provide install an enterprise-grade email security solution along with security awareness training services.
- The solution must offer protection against email-based threats (including phishing, malware, and business email compromise), user training to reduce human risk, and tools to simulate and measure phishing resilience across departments.
- System must include, but is not limited to:
• Integrate with Microsoft 365 or other email planforms used by the City.
• Provide protection from spam, phishing, spoofing, ransomware, and malware.
• Offer advanced threat detection (i.e., sandboxing, URL/link rewriting, attachment scanning).
• Detect and block business email compromise (BEC) attempts.
• Support DMARC, SPF, and DKIM enforcement and reporting.
• Include centralized management with alerting and detailed reporting.
• Offer configurable email filtering and quarantine options.
• Provide data loss prevention (DLP) tools or integration.
- User Awareness Training and Testing
• Ongoing security awareness training for all staff (admin and non-technical).
• Customizable, interactive training modules with quizzes and tracking.
• Periodic simulated phishing campaigns, with analytics on click rates.
• Risk scoring by department or user group.
• Training compliance reports for leadership and audit purposes.
• Multilingual content or ADA-compliant access, if available.
• Initial implementation and configuration.
• User onboarding and system administrator training.
• Technical support (8x5 minimum, with 24/7 availability preferred for critical issues).
• Optional managed phishing testing and reporting services.
• Documentation and knowledge transfer to the information technology department and compliance staff.
- Questions/Inquires Deadline: May 23, 2025