Oakland County Procurement Division

The buyer is seeking an IT Managed Service Provider to support and manage 163 servers, 2,400 workstations, and an Active Directory domain. The provider will be responsible for maintaining system performance, security, and availability. They must provide 24/7 remote support, implement CVE guidelines, and deliver regular performance reports. The service requires certifications like SOC2 Type 2 and ISO 27001, as well as CJIS compliance.

• 3/26/2025 - Requests for Clarification Due
• 3/31/2025 - Bidder Q&A Provided
• 4/9/2025 - Proposal Due Date

• Provide SOC2 Type 2, ISO/IEC 27001, HITRUST CSF, and FedRAMP certifications
• Have documented Service Level Agreements
• Have established Support Model and Software Release Management process
• Have 1-year product roadmap
• Data Center located in United States and/or Canada
• Support integration with Okta via SAML 2.0 or OIDC
• Provide CJIS compliance to protect stored data
• Provide recent penetration test and vulnerability report
• All managed services resources passed CJIS-compliant background check
• Provide 24/7 support model for in-scope services

• Manage 163 servers (23 Linux & 140 Windows VMs)
• Support 2,400 workstations (2,050 mobile and 350 fixed location Windows)
• Manage Active Directory (AD) Domain
• Provide 24/7/365 remote support for users and devices
• Implement Common Vulnerabilities and Exposures (CVE) guidelines
• Maintain server and workstation performance, availability, and capacity
• Perform regular updates and patch management
• Provide backup and disaster recovery planning and execution
• Deliver technical support and troubleshooting
• Generate monthly performance and incident reports