Security Information and Event Management Platform

A Missouri agency is seeking a qualified vendor to provide a Security Information and Event Management (SIEM) platform solution. The agency is open to evaluating both cloud-based (SaaS) and on-premises SIEM platforms, with a preference for on-premises deployment. The selected vendor will recommend and facilitate the purchase of a SIEM platform that meets the agency’s specific requirements.

Responsibilities include project management, overall implementation consulting, and ongoing guidance. The vendor will oversee installation, configuration, and integration aligned with the agency’s technical needs, including Single Sign-On (SSO) with Active Directory and/or Azure Active Directory (EntraID). The scope of services also covers general and advanced configuration, knowledge transfer, staff training, as well as the development of reporting, dashboards, and online help resources. Vendors will assist in setting up data collection, normalization, analysis, and alerting across the agency’s infrastructure.

Additionally, the vendor must provide comprehensive support during a thirty-day stabilization period, which includes daily configuration adjustments as needed. Performance testing tailored to the agency's environment and use cases is also expected.