Security Operation Center as a Service

Oklahoma State University Center for Health Sciences in Tulsa is seeking qualified vendors to provide a full‑service Security Operation Center as a Service (SOCaaS). The awardee will deliver continuous 24/7/365 monitoring, threat detection, investigation, and response for the university’s IT environment, including on‑premise servers, workstations, and medical/IoT devices. The contract includes implementation, ongoing subscription fees, licensing, log‑retention options, and optional value‑added services such as SOAR, UEBA, and advanced analytics. The university requires detailed security‑governance documentation, a completed Vendor Security Assessment, and a Business Associate Agreement prior to award. The effort begins with a one‑year term, renewable annually, and the vendor must staff dedicated analysts/engineers with appropriate certifications. • Provide 24/7 SOC monitoring, alerting, and incident response across all OSU‑CHS assets. • Supply and manage security technologies (SIEM, EDR/XDR, log management, threat intel, orchestration). • Deliver regular reporting (dashboards, KPI, executive summaries) and support compliance/audit activities. • Must meet extensive security‑assessment criteria, maintain a Business Associate Agreement, and offer optional log‑retention pricing (90 days, 1 year, 3 years, 7 years).