Managed Detection and Response Service for Educational Institution Cybersecurity

• Introduction Academy of Accelerated Learning is issuing this Request for Proposal (RFP) to solicit responses from qualified vendors for a Managed Detection and Response (MDR) service that will enhance our cybersecurity capabilities. The service must integrate with our Microsoft-based infrastructure, including Microsoft 365, Microsoft Azure, and Microsoft Defender, Microsoft Intune. 2. Scope of Services The selected Managed Detection and Response (MDR) provider will deliver a fully managed security operations service designed to protect the district office and three campuses (users, endpoints, cloud services, and data assets) through real-time monitoring, advanced analytics, proactive threat hunting, and expert-led incident response. Services must integrate with Microsoft 365, Microsoft Azure, and Microsoft Defender for Endpoint. 2.1. Managed Security Monitoring and Alerting • 24/7/365 monitoring of all security telemetry from: o Microsoft Defender o Microsoft 365 (email, Teams, OneDrive) o Microsoft Intune • Correlation of alerts across identity, endpoint, email, and cloud for holistic threat visibility. 2.2. Threat Detection and Analysis • Use of behavioral analytics, threat intelligence, and heuristics to detect: o Ransomware and malware attacks o Credential compromise and account takeovers o Lateral movement within the network o Phishing and Business Email Compromise (BEC) • Machine-learning-based analysis of endpoint and user activity to detect unknown threats. 2.3. Incident Response and Containment • Immediate response actions to confirmed threats, including: o Endpoint isolation o Blocking malicious IPs or domains o Disabling compromised accounts in Azure AD • Collaboration with IT teams during incident response. • Forensic investigation and root cause analysis for each critical incident. • Post-incident recommendations to prevent recurrence. 2.4. Threat Hunting and Intelligence Integration • Ongoing proactive threat hunting to identify indicators of compromise not caught by automated systems. • Integration with Microsoft threat intelligence feeds and third-party sources. • Identification of advanced persistent threats (APT), dwell time reduction, and early-stage attacker behavior. 2.5. User and Entity Behavior Analytics (UEBA) • Monitoring for deviations from normal user behavior based on: o Unusual login patterns or impossible travel o Abnormal file access/downloads o Lateral movement attempts • Risk-based scoring of user accounts and devices, with dynamic response triggers. 2.6. Vulnerability and Exposure Management • Monitoring for vulnerabilities in the software and systems used across the School District. • Recommendations and prioritization for patching or mitigation actions. 2.7. Security Reporting and Compliance Support • Monthly reporting on: o Threat trends o Response actions o Coverage and performance metrics • Audit-ready documentation for state/local cybersecurity compliance. • Support for incident-related public records requests or investigations, where applicable. 2.8. Service Management and Support • A dedicated Customer Success Manager or Technical Account Manager. • Quarterly service review meetings. • Onboarding support, including: o Integration with Microsoft APIs o Baseline configuration • 24/7 support for critical incidents and ticket escalation. 3. Proposal Requirements Vendors must include: • Detailed service description and technical approach • Experience with K–8 or public institutions • Project timeline and milestones • Cost proposal including any licensing fees. Separated by initial payment, annual or monthly payments as applicable • Sample reports and dashboards • References and certifications. 4. Evaluation Criteria Criteria / Weight Integration with Microsoft Security Tools 15% Threat Detection, Response, and Hunting Capabilities 15% Experience with K-8/Public Sector Implementations 10% Incident Response and Containment Approach 10% Compliance and Reporting Capabilities 10% Pricing. Detailed pricing by initial payment, annual or monthly payments as applicable 30% Onboarding and Support Services 10%

Agency: Universal Service Administrative Company (USAC) Status: Certified