Physical Security Risk Assessment and Strategic Modernization Roadmap Services

The Vendor is required to provide a comprehensive physical security risk and vulnerability assessment and develop a multi-phased strategic roadmap.
- Professional consulting services to evaluate the University’s existing physical security infrastructure, including video surveillance (VMS), access control systems (ACS), intrusion detection, emergency communication systems, and related integrations, and provide recommendations that support scalability across all existing and future University facilities.
- Our primary objective is to modernize our security infrastructure into a unified, interoperable ecosystem, reduce our on-site data center dependency where feasible through secure cloud or hybrid off-site storage, and ensure that all future hardware and software integrations are seamless, standards-based, and vendor-neutral.
- The consultant will work with information about campus facilities, security systems, how things operate, and possible weak points.
- A single ecosystem refers to a harmonized technical environment where hardware and software components share a common communication backbone, database schema, or native API set. The goal is to eliminate data silos and proprietary bottlenecks.
- The selected Consultant will conduct a structured evaluation of existing video surveillance, access control, intrusion detection, emergency communication, and related integrations across identified University sites. The assessment will include risk scoring and domain-level maturity ratings to clearly identify gaps and priorities.
- Project includes assessment and strategic design recommendations related to Video Management Systems (VMS), Access Control Systems (ACS), Intrusion detection and alarm systems, Emergency communication devices, Visitor management systems, parking and vehicle access control systems, Integration with Public Safety dispatch and operational workflows, and Network readiness and infrastructure considerations supporting physical security systems.
- Assessment includes VMS/video surveillance, access control (ACS), intrusion/alarms, intercom/blue-light/panic device, visitor management, parking gates/vehicle access, and integrations with Public Safety dispatch/workflows where applicable.
- Single pane of glass provides unified alarm management, a global event timeline for an audit trail that merges events from all systems into one view and common identity and access with SSO/MFA.
- Services include:
•    Proposers need to identify mobile expectations and role-based dashboards.
•    Identity and access lifecycle: Integration with HR System (Workday) and our student information system (Ellucian Banner), automating provisioning and deprovisioning workflows, and role-based access tied to identity attributes is a must.
•    Consultant must provide a gap analysis showing existing silos, proprietary limitations, and integration constraints.
•    Artificial Intelligence (AI) analytics for object detection, behaviors, and facial recognition.
•    Architecture options requirement: Consultant must propose at least two target-state reference architectures (cloud-forward and hybrid) with pros/cons, risks, and cost model differences.
•    Consultant must include local failover strategies, edge compute requirements, and store and forward architecture.
•    Availability/continuity: Identify target uptime, RTO/RPO for critical services, and survivability expectations for WAN outages (edge recording, offline door operation).
•    Explain how access is discontinued at the moment notification is received of an employee termination or other incident requiring immediate access management.
•    Privacy/records: Include state public records considerations, FERPA-adjacent handling for student conduct investigations, and chain-of-custody requirements for evidentiary video 
•    To elevate and achieve an enterprise transformation, the consultant needs to explicitly include governance, operations, staffing, and policies.