Seeking Authorized Resellers and Integrators to Supply Cybersecurity Software Licenses, Implementation Services, and Training for Ukrainian Critical Institutions

CRDF Global, with support from the United States Department of State, implements the Cybersecurity
Improvement Grants (CySIG) program, a competitive program that strengthens the cybersecurity and
resilience of central governmental institutions and state-owned critical infrastructure enterprises of Ukraine.
Under this program, CRDF Global seeks qualified vendors – authorized resellers, distributors, or integrators
of the named cybersecurity solutions – to supply commercial cybersecurity software licenses and
subscriptions and to deliver the associated training and implementation services to three Ukrainian
beneficiary institutions. This solicitation is organized in three lots: Lot 1, the supply of Splunk Enterprise
and Splunk Enterprise Security term licenses and official Splunk administration training for the Apparatus
of the Verkhovna Rada of Ukraine; Lot 2, the supply of a Tenable Security Center license for up to 1,500
assets together with professional implementation and configuration services and administrator workshops
for the State Non-Commercial Enterprise «National Children’s Specialized Hospital «Okhmatdyt»
(Ministry of Health of Ukraine) (NCSH «Okhmatdyt»); and Lot 3, the supply of a SentinelOne Singularity
Platform subscription (AI SIEM and Singularity Complete EDR for 100 servers) together with deployment,
onboarding, and knowledge-transfer services for the Office of the Prosecutor General of Ukraine. Offerors
may propose for any one lot, any combination of lots, or all three lots.

All three lots share a common structure: the supply of commercial cybersecurity software licensed to the
beneficiary institution as end user, with manufacturer support for the full license term, combined with
manufacturer-certified services that ensure the beneficiary’s own staff can independently operate, maintain,
and expand the platform after the grant period. Lot 1 supports the expansion of the Security Operations
Center (SOC) of the Apparatus of the Verkhovna Rada of Ukraine with a Security Information and Event
Management (SIEM) platform. Lot 2 supports the implementation of a centralized vulnerability
management capability for the IT environment of NCSH «Okhmatdyt». Lot 3 supports the deployment of
centralized security monitoring and endpoint detection and response for the critical services of the Office
of the Prosecutor General of Ukraine.

For each lot, CRDF Global anticipates executing a three-party agreement among CRDF Global, the selected
contractor, and the beneficiary institution. Licenses will be registered in the name of the beneficiary
institution, services will be delivered to the beneficiary in Ukraine (on-site in Kyiv, remotely, or in a hybrid
format as agreed with the beneficiary), and completion of each deliverable will be confirmed by an
acceptance certificate signed by the beneficiary and approved by CRDF Global.

The three lots will be evaluated and awarded independently. CRDF Global reserves the right to award each
lot to a different offeror, to award any combination of lots to a single offeror, or to make no award for any
lot. Offerors proposing for more than one lot may offer a discount conditional on a combined award,
provided it is stated separately and does not alter the per-lot pricing.

Each proposal must include:

Technical Proposal
● A clear statement of which lot or lots the offeror is proposing (Lot 1, Lot 2, Lot 3, or any combination).
● For each lot, a description of the products and services offered, including exact manufacturer part
numbers (SKUs) and quantities, license entitlement metric, license term, support level, and a pointby-point compliance statement against the Required Items and Salient Characteristics.
● Delivery approach and schedule: for Lot 1, training format, dates, and language; for Lot 2, implementation methodology, including safeguards for clinical systems and medical devices, and the administrator workshop plan (agenda, format, duration, and number of participants); for Lot 3, deployment methodology, including the log-source onboarding plan, phased EDR agent rollout with safeguards for production servers, the proposed tenant hosting region, confirmation that the offered agents support current Red Hat Enterprise Linux and Windows Server versions, and the knowledge-transfer workshop plan (agenda, format, duration, and number of participants).
● Manufacturer Authorization Letter or equivalent evidence of authorized partner status for each product offered.
● CVs and manufacturer certifications of proposed personnel (required for Lots 2 and 3).
● List of recent, relevant experience with at least [two (2)] references, with past performance clearly
included.
● 10-page limit per lot, excluding CVs, authorization letters, and cost proposals

Written Acceptance of Terms 

● Written acknowledgment and acceptance of the Licensing, Delivery, and Compliance Terms and of the three-party agreement structure, together with a self-certification that the offeror is not excluded from U.S. federal awards and complies with the Section 889, Kaspersky, and sanctions requirements. A proposal that does not accept these terms may be found non-responsive.

Cost Proposal in USD
○ NOTE: Offerors are required to submit their cost proposal using the format in the RFP attached or a template following the same structure. Prices must be submitted in a separate table for each beneficiary institution, with one price for every line item listed, quoted in U.S. dollars exclusive of VAT (see the tax exemption provision above), and valid for at least [90] days from the submission deadline. Optional services and any combined-award discount must be listed separately. Offerors may add rows to show cost-sharing, leveraged resources, or in-kind contributions; all additions should be clearly labeled.