The City of Raleigh is seeking a Data Security Posture Management (DSPM) solution to strengthen its overall information security posture. The DSPM service will enable the City to automatically discover and classify structured and unstructured data, assess risk based on data sensitivity and access patterns, and provide continuous monitoring to prevent unauthorized access, movement, or exposure. The selected firm will be required to complete a Supplier Cybersecurity Assessment Questionnaire Form and adhere to the City's security and privacy requirements. Key features of the DSPM solution include: • Comprehensive visibility into the City's data • Classification and protection of sensitive data • Continuous monitoring to prevent unauthorized access • Integration with existing security tools and governance processes • Support for compliance with regulatory and city-specific requirements • Enhancement of data protection strategies • Provision of actionable insights to reduce risk and ensure responsible data use The City requires the selected firm to provide a detailed scope of services, including a project understanding, approach, and schedule, as well as a team firm, experience, and certifications. The firm must also provide financial information, including audited or reviewed financial statements, and a proposal cost form. Some key requirements and responsibilities of the selected firm include: • Completing a DSPM Vendor Response Matrix • Providing a comprehensive narrative of the firm's understanding and approach to accomplishing the tasks outlined in the Scope of Work • Including a description of each task and deliverable and the schedule for accomplishing each • Providing information on the proposed staffing, deployment, and firm of personnel to be assigned to the project • Adhering to the City's security and privacy requirements, including those related to data breaches, incident response, and backup and recovery • Cooperating with the City's request to investigate and resolve any security incidents • Providing the City with access to the firm's business continuity and disaster recovery plans • Ensuring that all backup copies of City Data remain the sole property of the City • Complying with all applicable data protection laws and regulations The City reserves the right to reject any or all proposals for any reason and to waive any informality it deems in its best interest.