DBHR AMHC SP Building Automation System (BAS)

DBHR AMHC SP Building Automation System (BAS) Alton Mental Health Center, located at 4500 College Avenue, Alton, IL 62002 is seeking a qualified vendor to provide IT-side support of the Building Automation System (BAS), and generator focused solely on computer/server, software platform stability, cybersecurity, patching, and data protection for a one-year term beginning 07/01/2026 and ending 06/30/2027. Item # 1: ( 936 - 73 ) Alton Mental Health Center, located at 4500 College Avenue, Alton, IL 62002 is seeking a qualified vendor to provide IT-side support of the Building Automation System (BAS), and generator focused solely on computer/server, software platform stability, cybersecurity, patching, and data protection for a one-year term beginning 07/01/2026 and ending 06/30/2027. The vendor will not be responsible for HVAC programming, field devices, mechanical system control tuning, or controller replacements. Must be able to maintain a secure & reliable BAS operation environment while preventing cyber intrusion risks. Systems covered shall include but are not limited to: BAS server/host workstation; BAS supervisory software & licensing maintenance; Windows/OS environment & update compliance; Antivirus/anti-malware protection; Database backup and restoration readiness; Virtual machine hosting (if applicable); Network firewall/security configuration for BAS; and User accounts, credentials, and permission access. Vendor responsibilities shall include but are not limited to: Routine Maintenance of applying OS/security patches quarterly, maintaining BAS software updates & version control, conducting malware scans & prevent threats, and monitoring CPU, memory, storage utilization; Cybersecurity Requirements of maintaining firewall & network isolation per best practice, reviewing cybersecurity configuration annually, and monitoring for intrusion or unauthorized connection attempts; Backup & Disaster Recovery of maintaining automated daily/weekly scheduled backups, providing required offsite and onsite storage, and verifying recovery capability quarterly; Access Control Management of creating and/or disabling user accounts when authorized, and maintaining password policies, MFA preferred; and Response Requirements of providing standard support response within 24 hours, and providing critical outage response within 4 hours. Required Vendor Deliverables to Owner include the following: Quarterly server health & update report; Quarterly backup verification documentation; Annual cybersecurity posture report; and Semi-annual access/user audit list. This procurement will exclude the following: Mechanical/HVAC controls troubleshooting; Programming or sequence modifications; VAV/sensor/field device work; and Installation or retrofit labor. Vendor Minimum Qualifications: Ability to meet facility/state IT security standards - vendors must comply with applicable Illinois Department of Innovation & Technology (DoIT) security requirements including, but not limited to, the detailed requirements which will be incorporated into the contract and/or provided upon award, and vendors must attest to their ability to comply; and personnel must meet background screening requirements - all assigned personnel must pass required State background checks prior to site and network access. Scope of work is attached. Alton Mental Health Center, located at 4500 College Avenue, Alton, IL 62002 is seeking a qualified vendor to provide IT-side support of the Building Automation System (BAS), and generator focused solely on computer/server, software platform stability, cybersecurity, patching, and data protection for a one-year term beginning 07/01/2026 and ending 06/30/2027. The vendor will not be responsible for HVAC programming, field devices, mechanical system control tuning, or controller replacements. Must be able to maintain a secure & reliable BAS operation environment while preventing cyber intrusion risks. Systems covered shall include but are not limited to: BAS server/host workstation; BAS supervisory software & licensing maintenance; Windows/OS environment & update compliance; Antivirus/anti-malware protection; Database backup and restoration readiness; Virtual machine hosting (if applicable); Network firewall/security configuration for BAS; and User accounts, credentials, and permission access. Vendor responsibilities shall include but are not limited to: Routine Maintenance of applying OS/security patches quarterly, maintaining BAS software updates & version control, conducting malware scans & prevent threats, and monitoring CPU, memory, storage utilization; Cybersecurity Requirements of maintaining firewall & network isolation per best practice, reviewing cybersecurity configuration annually, and monitoring for intrusion or unauthorized connection attempts; Backup & Disaster Recovery of maintaining automated daily/weekly scheduled backups, providing required offsite and onsite storage, and verifying recovery capability quarterly; Access Control Management of creating and/or disabling user accounts when authorized, and maintaining password policies, MFA preferred; and Response Requirements of providing standard support response within 24 hours, and providing critical outage response within 4 hours. Required Vendor Deliverables to Owner include the following: Quarterly server health & update report; Quarterly backup verification documentation; Annual cybersecurity posture report; and Semi-annual access/user audit list. This procurement will exclude the following: Mechanical/HVAC controls troubleshooting; Programming or sequence modifications; VAV/sensor/field device work; and Installation or retrofit labor. Vendor Minimum Qualifications: Ability to meet facility/state IT security standards - vendors must comply with applicable Illinois Department of Innovation & Technology (DoIT) security requirements including, but not limited to, the detailed requirements which will be incorporated into the contract and/or provided upon award, and vendors must attest to their ability to comply; and personnel must meet background screening requirements - all assigned personnel must pass required State background checks prior to site and network access. Scope of work is attached.