Statewide Cybersecurity Resources

The State of Maryland’s Department of General Services is seeking qualified vendors to provide advanced cybersecurity and privacy services statewide. The solicitation is divided into three functional areas—Governance, Architecture/Engineering/Implementation, and Protection/Defense—allowing firms to bid on only one area. Work includes developing policies, GRC programs, risk assessments, secure architecture design (Zero‑Trust, DevSecOps), tool implementation (SIEM, IAM, endpoint protection), cloud security, SOC staffing, threat hunting, incident response, and related deliverables. The contract will be awarded to a vendor that demonstrates strong technical expertise, relevant experience, and compliance with minority‑business participation goals (15% MBE, 3% VSBE). Proposals must be submitted in a double‑envelope format (technical and financial) via eMMA by September 18, 2026. • Three separate functional areas; bidders may respond to only one. • Required deliverables: governance frameworks, design documents, security configurations, SOC reports, threat intel briefs, etc. • Mandatory double‑envelope submission (technical first, financial second). • MBE/VSBE participation goals: 15%/3% respectively. • Oral presentations may be required (date TBD). • Questions due by August 17, 2026; proposals due September 18, 2026.