City of Colorado Springs

Buyer is requesting information from organizations interested in providing privileged access management (PAM) solutions to enhance their cybersecurity posture. Buyer requires a robust PAM solution that provides detailed control, monitoring, and logging of privileged accounts while ensuring users do not have direct access to privileged credentials. This RFI will help determine if there are sufficient qualified sources and to understand budgetary needs for a possible future competitive procurement.

• 4/18/2025 - Question Deadline
• 5/2/2025 - Proposal Due Date

• Experience in PAM solutions
• Experience working with municipalities
• SOC2 certification or explanation if not certified
• Maintain Cybersecurity insurance

• Provide detailed control of privileged accounts
• Monitor and log privileged account activity
• Ensure users don't have direct access to privileged credentials
• Support SSO/MFA implementation
• Implement secure authentication controls for remote access
• Develop privileged account management processes
• Conduct vulnerability assessments regularly
• Perform annual penetration testing
• Implement encryption meeting industry standards
• Provide incident response capabilities
• Establish secure disposal methods for media and technology
• Maintain privileged account inventory
• Develop data classification schemes
• Implement network segregation by trust zones
• Deploy intrusion detection/prevention systems
• Provide denial of service attack protection
• Configure security event logging and monitoring
• Support secure backup and recovery processes
• Develop disaster recovery capabilities
• Implement protection against potential AI/ML data leakage