Project Information

Bid Title

Co-Managed Security Solution

Issuing Agency

City of York

Location

Pennsylvania

Published Date

Jul 21, 2026

Closing Date

Aug 10, 2026

Government Level

State & Local

Status

Closed

Original Source

Join to Access Full Details

Bid Inquiries

Join to Access Full Details

Bid Documents

Join to Access Full Details

Project Description

Project ID:

Title: Co-Managed Security Solution

Addenda: 0

Release Date: 7/21/2026

Due Date: 8/10/2026

Follow

Co-Managed Security Solution

Request For Proposal

Business Administration - Information Technology

20890 , 20991

Project ID: RFP 2026-025

Release Date: Tuesday, July 21, 2026

· Due Date: Monday, August 10, 2026 4:00pm

Posted Tuesday, July 21, 2026 10:22am

All dates & times in Eastern Time

Draft Response No Bid19 days, 18 hours, 36 minutes

Post Information

Posted At:Tue, Jul 21, 2026 10:22 AM
Sealed Bid Process:Yes (Bids Sealed / Pricing Sealed)
Private Bid:No

Overview

Summary

The City of York IT Department is exploring partnering with a party for a Co-Managed Cybersecurity Solution. Primary items to be included are as follows:

• Monthly Vulnerability Management – This service should include Vulnerability Management Licensing, review of Internal - External Vulnerability Scans and Recommendations for remediation by City of York IT staff as necessary.
• Proactive Cybersecurity Administration Assistance - Ensure technology is constantly aligned with best-in-class standards in terms of security and performance. Focus is on cyber security alignment with Center for Internet Security (CIS) framework v8.1, Implementation Group 1 (IG1) with the aim to meet Implementation Group 2 (IG2).
• 24x7 System Monitoring and Alerting for servers and critical network devices utilizing a Remote Monitoring and Management (RMM) cloud-based platform.
• Endpoint Detection and Response (EDR) - Antivirus & AntiSpyware Software licensing, monitoring, updates and maintenance.
• Cyber Security Training, Testing and Reporting for all end users, consists of an annual training video and test. End user data is reported for management review and further end user training.
• Monthly Cyber Security Phishing Testing and Reporting
• Dark Web Monitoring and Alerting – Continuous Dark Web Monitoring and Alerting for data breaches of credentials matching your domain name.
• Microsoft Patch Management – Monthly, Bi-Monthly or Weekly security patches, service packs and updates deployed after normal business hours and after evaluation.
• Other software updates – Adobe, Java, etc.

Timeline

RFP ISSUE DATE:

July 21, 2026

QUESTIONS RE RFP DUE:

August 4, 2026, 12:00pm

RESPONSES TO QUESTIONS POSTED:

August 7, 2026, 12:00pm

PROPOSALS DUE:

August 10, 2026, 4:00pm

Commodity Codes

• NAICS 541512Computer Systems Design Services
• NAICS 541519Other Computer Related Services

* Disclaimer: Government BidHub provides information on bids, RFPs (Requests for Proposals), and RFQs (Requests for Qualifications) solely for convenience and informational purposes. This site is not an official public notice board. For official details, responses, or inquiries, please contact the relevant government agency directly.