Disclaimer
This document is an effort to gather and share information to aid districts in determining whether they need to go through an official bid/RFP procedure or simply gather multiple quotes. Purchasing requirements depend on several factors and can be confusing: state, federal, and local policies each have their own requirements, and different federal agencies may impose additional requirements. Whether a district needs to go out to bid (RFP) or can instead gather quotes will ultimately be a local decision; however, we are sharing the resources below to help districts make an informed decision.
Background
DTMB is overseeing the SLCGP grant. The grant details can be found on the DTMB – SLCGP website. Some highlights are listed here:
- The current funding period is “Fiscal Year 2022 (FY22)”
- Michigan has been awarded $4.7M and has awarded individual organizations funding. No further awards will be made for FY22 funds
- The end of the spending and performance period for FY22 funding is November 30, 2026 / December 30, 2026, for EDR Projects and Cybersecurity Assessments, respectively.
- Awarded funds should be expended on or before these dates
- The cost for services extending past this performance and spend period are not reimbursable.*
- EDR/MDR/XDR Contract should begin December 1, 2024, and end by November 30, 2026, to achieve maximum value of the award*
- *Contracts can extend past 11/30/2026 but SLCGP Funding may not be used to pay for the services that extend past the performance and spend period.*
- Funding is through DHS and FEMA
RFP or Quotes?
Districts need to consider several factors when establishing a procurement procedure for SLCGP funds. They may be able to simply solicit multiple quotes or a formal RFP process may be necessary. Some of the information below should help with that decision
- Local policy may have restrictions based on the purchase amount and whether the purchase is for a product or service.
- Most definitions of Managed Detection and Response (MDR) refer to it as a “service” while Endpoint Detection and Response (EDR) is typically considered a “technology” or “software”
- MiSecure offers 3 packages. For more information on each package or to obtain a quote, contact Beth Soggs.
- Package #1 is MDR with 24x7x365 monitoring. This package was purchased for the servers in Michigan school districts.
- Package #2 is MDR
- Package #3 is EDR
- State purchasing thresholds are set annually. The State of Michigan 2024-25 competitive bid threshold is $30,512, but local district policy may be more restrictive.
- Federal policies vary by purchasing amount
- Micro-purchases < $10,000: multiple quotes are not required
- Small purchases < $250,000: at least 3 quotes
- Formal procurement > $250,000: Seal bids, RFP
MiSecure purchasing
CrowdStrike was purchased from the OMNIA contract for the State of Michigan 97g project. The contract documents are available at the following links. You can review and align with the SLCGP requirements. Districts in the State of Michigan are able to purchase from OMNIA, which is one of many cooperative procurement contracts available to districts.
Questions
Contact DTMB or MSP/EMHSD with specific questions or concerns about the information being shared here. Or if you are not sure if your local policy takes hierarchy over the federal procurement policies contact DTMB/MSP/EMHSD to get confirmation
- Patrick Blake – [email protected] – SLCGP Coordinator
- Amanda Lung – [email protected] – Financial Questions
- Deborah Bracy – [email protected] – Procurement & Audit Questions
- General Mailbox – [email protected]
- Michelle McClish – [email protected] – Cyber Program Manager
- SLCGP Mailbox – [email protected]