Cybersecurity Monitoring and Response Solution for School District

Monitoring, Detection, and Response (SOC + SIEM) Narrative Clarksdale Municipal School District (CMSD) is seeking support through the FCC Cybersecurity Pilot Program for a monitoring, detection, and response solution that includes a Security Operations Center (SOC) and/or Security Information and Event Management (SIEM) platform, or equivalent.

This solution is critical to improving the district’s ability to detect and respond to cybersecurity incidents across nine schools and administrative locations. CMSD’s current environment lacks 24/7 centralized visibility, real-time alerting, and a cohesive incident response framework.

Requested Services and Capabilities Vendors should propose a fully managed SOC-as-a-Service solution, a self-managed SIEM with implementation support, or a hybrid offering that includes: Log collection from endpoints, servers, firewalls, and cloud environments Real-time alerting and threat correlation Data dashboards for event tracking and risk monitoring Data Loss Prevention (DLP) support for sensitive data movement Vulnerability detection integrated with CVSS or KEV prioritization Threat response actions such as endpoint isolation, alert triage, and escalation workflows Role-based user access and audit logging for all administrative activity Retention and export of event logs for compliance and reporting Integration with MOHS Network Monitoring System CMSD has received a state-funded Network Monitoring System through the Mississippi Office of Homeland Security (MOHS).

Vendors must explain how their proposed SOC and/or SIEM solution will integrate with or complement this existing system. This may include forwarding logs, synchronizing alerts, or consolidating dashboards. Additionally, proposals must include training, onboarding, or documentation for CMSD staff on how to effectively leverage the MOHS monitoring system within the proposed security operations framework.

Technical Environment 9 total locations ~2,000 users ~1,600 devices (Chromebooks, laptops, desktops) Windows-based servers, firewalls, endpoint protection agents Integration with domain controllers and cloud services required Agency: Universal Service Administrative Company (USAC) Status: Certified