SLED Opportunity · TEXAS · SAN ANTONIO WATER SYSTEM

    RE-BID) Addendum 1 (ANNUAL CONTRACT FOR MANAGING CYBER SECURITY SERVICES PROVIDER

    Issued by San Antonio Water System
    localRFPSan Antonio Water SystemSol. 4018
    Closed
    STATUS
    Closed
    due Feb 6, 2026
    PUBLISHED
    Jan 9, 2026
    Posting date
    JURISDICTION
    San Antonio
    local
    NAICS CODE
    541512
    AI-classified industry

    AI Summary

    San Antonio Water System seeks proposals for a Managed Security Services Provider (MSSP) including managed SIEM services. The contract is for one year with five optional renewals. Bids must be submitted electronically or by sealed bid by February 6, 2026.

    Opportunity details

    Solicitation No.
    4018
    Type / RFx
    RFP
    Status
    Issued
    Level
    local
    Published Date
    January 9, 2026
    Due Date
    February 6, 2026
    NAICS Code
    541512AI guide
    State
    Texas
    Agency
    San Antonio Water System

    Description

    INSTRUCTIONS TO RESPONDENTS Bids are solicited for furnishing the goods, supplies, equipment and/or services as set forth in this solicitation. Bids must be received Electronically or by Sealed Bid in the Purchasing Office by date and time specified, and then publicly opened and read aloud. Sealed Bids that are either mailed or delivered must be enclosed in a sealed envelope, addressed to the Director Purchasing, and have the bid number, bid name, closing date, and company name clearly marked on the outside of the envelope. Sealed Bids should be mailed or hand delivered to the following address: San Antonio Water System Purchasing Department 2800 US Highway 281 North, Administration Bldg, 5th Floor San Antonio, TX 78212 Electronic Bids can not be accepted after the specified date/ time. Sealed Bids received late will be returned; they will not be opened nor considered in the evaluation of the bid. The undersigned agrees, if the bid is accepted, to furnish any and all items upon which prices are offered, at the price(s) and upon the terms and conditions contained in the specifications. The period of acceptance of this bid will be 90 calendar days after the bid opening date. SCOPE: The San Antonio Water System is soliciting proposals for a vendor to provide Managed Security Services Provider (MSSP) that will also provide managed SIEM service. Vendors are required to submit with their proposal complete detail to include service level agreement and sample escalation procedures. Each section listed in the RFP shall be responded to in detail, addressing each item in response. This contract will be for one (1) year with five (5) annual optional renewals/extensions, for a total of six (6) years. If determined that an extension is favorable to the system, price and service considered, the award includes annual renewals. We highly recommend online submission. This expedites the process and reduces errors for both buyer and supplier. For technical assistance, please contact Ion Wave's Customer Success Team: 1-866-277-2645 x 4 or email support@ionwave.net. The San Antonio Water System Purchasing Department is willing to assist any bidder(s) in the interpretation of bid provisions or explanation of how bid forms are to be completed. Assistance may be received by visiting the Purchasing Office in the SAWS Main Office, 2800 US Hwy 281 North, San Antonio, TX 78212, or by calling (210) 233-3819. To report suspected ethics violations impacting the San Antonio Water System, please call 1-800-687-1918. --- Q&A --- Q1: Are there defined incident severity levels and response time objectives that must be adhered to beyond what is outlined in a provided service-level agreement? A1: Please see addendum one under attachment tab for question responses. Submitted: 1/16/2026 01:52:18 PM (CT) Q2: How many total locations, facilities, or operational sites are currently in scope for security monitoring and incident response? A2: Please see addendum one under attachment tab for question responses. Submitted: 1/16/2026 01:52:05 PM (CT) Q3: Approximately how many active employee users are in your environment? A3: Please see addendum one under attachment tab for question responses. Submitted: 1/16/2026 01:51:52 PM (CT) Q4: Is the CrowdStrike Falcon environment currently fully self-managed, or is third-party managed services support utilized for ongoing configuration, monitoring, and response? A4: Please see addendum one under attachment tab for question responses. Submitted: 1/16/2026 01:51:36 PM (CT) Q5: 17. Is the 150 GB/day estimate average, peak, or worst-case? 18. What happens to historical log data if the contract is not renewed? 19. Is log retention 1 year hot storage or can part be archived? 20. Are any log sources currently excluded due to cost or volume? 21. What level of access is needed for your staff to the SIEM and ITSM platform, and how many users might require access? 22. Is any integration required between the providers ITSM platform and an internal case management system? 23. What is your preferred method for secure log transmission and are there any network constraints we should account for A5: Please see addendum one under attachment tab for question responses. Submitted: 1/16/2026 01:02:58 PM (CT)

    Key dates

    1. January 9, 2026Published
    2. February 6, 2026Responses Due

    AI classification tags

    Frequently asked questions

    SLED stands for State, Local, and Education. These are solicitations issued by state governments, counties, cities, school districts, utilities, and higher education institutions — as opposed to federal agencies.

    SamSearch Platform

    Stop searching. Start winning.

    AI-powered intelligence for the right opportunities, the right leads, and the right time.