The Vendor is required to provide for a network security policy management solution.
- Services include:
• Firewall management: ensure efficient management of firewall rules to enhance security, performance, and change control processes.
• Policy compliance: achieve compliance with internal security standards and relevant regulatory frameworks (e.g., PCI) by monitoring and reporting on firewall policies.
• Risk and vulnerability management: mitigate network threats by assessing risks and performing regular vulnerability scans based on system configurations.
• Performance optimization: improve security policy efficiency and system performance through automated optimization recommendations.
• Compliance and audit reporting: maintain compliance with regulatory standards through detailed audit trails and comprehensive reporting.
• Self-service options: empower users to efficiently manage firewall requests, access resources, and control their agency contexts through a self-service portal.
• Self-service policy management: allow users to independently create, modify, and manage security policies, with built-in review and approval workflows to ensure compliance.
• Automated rule recertification: automate the rule recertification process, ensuring rule relevance and identifying unnecessary rules without manual intervention.
• Change management: provide a streamlined process for submitting, tracking, and approving configuration changes through a self-service portal.
• Delivery, deployment/implementation of proposed network security policy management solution; high-level schedule and resource plan: include a detailed timeline and resource allocation plan (propose use of implementation partner if applicable);
• Training approach: outline key elements of the training plan to ensure smooth adoption of the new system;
• Implementation support during stabilization period: provide ongoing support to address any issues and ensure the system operates smoothly during the initial phase after implementation; and
• Standard technical support: provide ongoing support, at university request, to address any issues and ensure the system operates smoothly after the solution has been fully implemented and accepted by university.
- Questions/Inquires Deadline: June 11, 2025