The State of Maryland is seeking a contractor to provide digital forensic and incident response services. The contractor will be required to provide comprehensive incident response services, including incident response retainer, containment and eradication, public relations and crisis communications, recovery, and negotiation. The contractor will also be required to provide digital forensics services, including data collection and preservation, data examination and analysis, reporting and communication, and metrics reporting. The contractor will also be required to provide proactive services, including security program assessments, threat hunting and intelligence, tabletop exercises and incident simulations, vulnerability assessments and penetration testing, security awareness training, and red teaming and adversary simulations. The contractor must have at least 10 years of experience in providing digital forensics and incident response services and must have a minimum of $1,000,000 in annual revenue. Some key points to consider: * The contract will be for a base period of 3 years with two 1-year option periods. * The contractor must be able to provide services 24/7/365. * The contractor must have experience in coordinating and collaborating with federal and state law enforcement and national defense partners. * The contractor must have experience in delivering digital forensics and incident response services using various endpoint managed detection and response, security information and event management, and other cybersecurity monitoring and logging technologies. * The contractor must be able to provide a detailed plan for incident response, including procedures for activation, containment, eradication, recovery, and negotiation. * The contractor must be able to provide a detailed plan for digital forensics, including procedures for data collection and preservation, data examination and analysis, reporting and communication, and metrics reporting. * The contractor must be able to provide a detailed plan for proactive services, including security program assessments, threat hunting and intelligence, tabletop exercises and incident simulations, vulnerability assessments and penetration testing, security awareness training, and red teaming and adversary simulations.