Cyber Security and Incident Planning Services

The Vendor is required to provide invested significant resources into staffing and enhancing its security posture by procuring and deploying multiple levels of security prevention, detection, and mitigation.
- They must include maintenance, review, and update procedures and compliance and exception recommendations. To be included, but not limited to:
•    Governance
•    Security Awareness and Training
•    Mobile Device Management
•    IT Risk Management
•    Software Installation
•    Data Retention, Backup, and Archive
•    Data Protection and Classification
•    Acceptable Use, including Internet and Email
•    Access Control
•    Account Management
•    Password Protection and Construction
•    Cloud and Third-Party Service Providers
•    AI and Machine Learning
•    Email
•    Encryption
•    Remote Access
•    Removable Media
•    Antivirus and Malware
•    Multi-factor Authentication
- Plans should be technical and non-technical and include stipulations for being both onsite and remote. To be included, but not limited to:
•    Cyber Security, including malware, phishing, ransomware, data theft, and denial of service
•    Manmade, such as natural gas leaks or explosions
•    Natural disasters such as hurricanes, floods, and tornadoes
- Project budget: $92,000.

- Contract Period/Term: 1 year
- Questions/Inquires Deadline: September 03, 2025