REQUEST FOR QUALIFICATIONS
for
REQUEST FOR QUALIFICATIONS (RFQ) FOR MANAGED SERVICES PROVIDER
MANDATORY PRE-SUBMITTAL MEETING: November 13, 2025,
AT 11 AM
RESPONSES DUE: December 10, 2025, at 12 PM
Mid-Peninsula Water District
1075 Old County Road, Suite A
Belmont, CA 94002
22117554.4
1.0 INTRODUCTION
The Mid-Peninsula Water District (MPWD or District) seeks the services of a Managed Services Provider
(MSP) to provide information technology (IT) managed services for the MPWD in Belmont, California. It
is the intent of this RFQ to have the successful provider enter into a Contract for Professional Services
with the MPWD to supply the services as outlined herein.
Statements of Qualifications (SOQ) received by no later than 12:00 PM on December 10, 2025, will be
ranked by a selection committee. Based on the selection committee’s ranking, the District will negotiate
a professional services agreement (PSA) with the top-ranked provider.
District Background
The Mid-Peninsula Water District is a local special district responsible for providing essential water
services to approximately 30,000 people through over 8,100 accounts in Belmont, San Carlos, and
unincorporated San Mateo County. The District manages a complex water infrastructure system, including
pipes, pumps, regulators, and storage tanks, and relies on water purchased from the San Francisco
Regional Water System. MPWD is currently undertaking a five-year Capital Improvement Program (CIP)
to upgrade its infrastructure, ensuring a safe, reliable, and high-quality water supply.
The District's IT environment is crucial to its operations, supporting typical office network infrastructure
and administrative services. The District also maintains specialized systems which are supported by third-
party vendors, including Supervisory Control and Data Acquisition (SCADA) for monitoring and operating
the water system, Geographic Information System (GIS) software for asset management and planning,
and Advanced Metering Infrastructure (AMI) water meters for efficient data collection and customer
access. The District operates with a relatively small staff of 21 employees, which are a mix of office and
field staff. There are no dedicated IT staff within the District's organizational structure, and MPWD has
been using an MSP for over 20 years. MPWD also adheres to the requirements of the California Public
Records Act and creates an annual catalog of Enterprise Systems in compliance with California Senate Bill
272 (SB 272).
The District’s current IT systems and hardware include:
• Three office sites (listed further below)
• Approximately 10 remote equipment sites (e.g., tanks and pump stations), with communications
needs
• Approximately 26 end-users, including 21 full time employees (office and field), and 5 Board
members (email-only access)
• Almost exclusively Microsoft Windows-based systems.
• Laptops and desktops for end-users
• File and database servers
• VMware virtualization services
• iPads
• Cell phones
2025 Managed Service Provider
Request for Qualifications
Page 2 of 38
22117554.4
• Networked printers
• Desktop peripherals
• VPN access for select employees
• SCADA control equipment (outside of this scope except for communications support)
• Managed software/license subscriptions (primarily Microsoft Office and Adobe products)
Mid-Peninsula Water District office sites:
1. Corporation Yard and Shop
3 Dairy Lane
Belmont, CA 94002
2. Main and Business Office
1075 Old County Road, Suite A
Belmont, CA 94002
3. Emergency Operations Center – Not currently occupied; construction anticipated to be
complete in 2026
1510 Folger Drive
Belmont, CA 94002
1.1 PURPOSE
The District is seeking a Managed Service Provider (MSP) to seamlessly integrate with staff’s workflow,
and essentially function as an extension of the MPWD team. The chosen MSP will be critical in enhancing
the District's IT infrastructure, ensuring efficient operation, bolstering cybersecurity defenses, and
facilitating a strategic transition of networks to a secure, cloud-based server environment (e.g., AWS,
Azure, Google Cloud). This partnership is vital to supporting the District's core mission of delivering a safe,
high-quality, and reliable water supply to the community.
2.0 SCOPE OF SERVICES
2.1 Managed IT Services Scope of Services
MPWD is seeking the services of a highly qualified agency to work closely with MPWD staff to support the
initial service transition and provide ongoing support, as described under the three disciplines below.
Discipline A: On-boarding/Transition needs:
a) Securely transfer all administrative account credentials from previous MSP. Update
credentials/passwords to ensure no ongoing unauthorized use.
b) Transfer administrative contact credentials/delegation with external service providers:
o Internet Service Providers,
o Landline phones,
o Cell phones,
o Internet domain name (DNS) registration,
2025 Managed Service Provider
Request for Qualifications
Page 3 of 38
22117554.4
o Web hosting,
o Microsoft 365 subscription,
o Physical security (Sonitrol), and
o Other cloud and related services.
c) Transfer physical computer hardware assets from previous MSP, to MPWD site or
appropriate secured data center facility.
o Coordinate downtime to minimize operational disruption.
d) Compile thorough report on condition and configuration of computer and network systems
at time of on-boarding.
e) Migrate private hosted virtual machines to new provider.
f) Support staff in reviewing and updating subscription licenses and user access.
g) Support staff in reviewing and updating naming conventions of physical assets.
h) Work with staff to develop/update service communication forms such as employee on-
boarding and off-boarding procedures and IT asset acquisition/retirement.
i) Work with staff to provide any short- or long-term recommendations for the District for
cost-efficiency and improved resource utilization.
j) Help staff understand and select between cloud-based hosting platform options.
k) Depending on timing, scope may include transfer of network functions from an aged
physical server or from a privately-hosted cloud server platform.
Discipline B: Fixed Monthly Services and Discipline C: On-Call Services will be comprised of a
combination of the following services.
Ongoing support:
a) Tiered help-desk support for all office and field users, including ticket tracking.
b) Regular and as-needed on-site support. We prefer a technician to be available for regular
scheduled on-site visits (e.g., several hours bi-weekly).
c) Monitoring and maintenance of all critical operational services, at operating-system and
application level. 24/7/365 monitoring of systems and proactive response to critical events,
including the detection and response to phishing attempts, malware infections, and
ransomware attacks. This includes monitoring for potential security threats within the cloud
environment and ensuring minimal error and timely follow-up.
d) Monitoring of network connectivity health (ISP, VPN) between remote sites.
e) Maintain network security, including anti-virus software, security updates, patch
management, remediation, and robust anti-phishing and anti-malware solutions to protect
against threats like ransomware. Maintain Endpoint Detection and Response (EDR) to
protect critical water infrastructure, sensitive customer data, and the cloud-based
environment. The MSP will also be responsible for implementing and managing secure
password management policies and systems, such as multi-factor authentication (MFA), to
ensure strong user authentication and protect against unauthorized access.
f) Management and support of disaster recovery systems and backups, including a locally
hosted backup (Network-Attached Storage).
g) Transparent reporting and communication of any security events.
2025 Managed Service Provider
Request for Qualifications
Page 4 of 38
22117554.4
h) Repair or replacement of faulty computer and network hardware to maintain or improve
performance, as requested.
i) Review and deploy software patches for security, performance, and functionality
improvements to operating systems and key applications on servers, network equipment,
and end-user computer equipment. Provide monthly reports on patch/update compliance
rate.
j) Manage end-user accounts in Active Directory and elsewhere:
o Create user accounts for new employees,
o Disable user accounts for departing employees, with support for preserving and
transferring email and other files, and
o Modify access credentials when needed, with appropriate, auditable approval
procedures.
k) Purchase, configure, deploy and retire computer hardware for end-users:
o new-hires,
o under appropriate hardware refresh plan, and
o as requested.
l) Onboarding/Offboarding Staff: Provide support for the onboarding of new employees,
including account creation, device provisioning, and access management. Support
offboarding of employees, including account deactivation, device retrieval, and data
security.
m) Purchase and configure computer server and network equipment hardware:
o under appropriate hardware refresh plan, and
o as requested.
n) Manage office phone systems:
o Create new and modify existing phone extensions,
o User support for configuration of customer-facing phone menus, phone forwarding,
scheduling, on-call numbers, voicemail, and other phone services, and
o Provide recommendations for potential alternative phone system service.
o) Support staff in annual IT budget development, including making recommendations for
hardware replacement schedule.
p) Lifecycle management of hardware.
q) Management of software subscriptions, renewals, licensing, and compliance for all relevant
applications, particularly Microsoft, Adobe, and security software.
r) Documentation and Tracking: System, network, and application documentation; license,
warranty, and asset tracking. This includes documenting Enterprise Systems for compliance
with California Senate Bill 272 and maintaining comprehensive documentation for all anti-
phishing, anti-malware, log management systems, password management policies, and
software subscriptions.
s) Periodic (at least monthly) reporting on system monitoring, help desk activities, software
2025 Managed Service Provider
Request for Qualifications
Page 5 of 38
22117554.4
This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.