New York State Contract Reporter #2138642

Cybersecurity Consulting and Assessment Services for City of Cortland Water and Wastewater Infrastructure

This opportunity seeks cybersecurity consulting and assessment services for the City of Cortland's water and wastewater infrastructure, funded by the New York State SECURE Grant Program. - Government Buyer: - City of Cortland, New York - Offices involved: City Clerk's Office and Administration & Finance (Finance) - Scope of Services: - Cybersecurity risk assessment and penetration testing for both operational technology (OT) and information technology (IT) environments - Network review and asset inventory for water and wastewater facilities - Development of a compliance roadmap aligned with New York State and federal cybersecurity regulations, including the NIST framework - Products/Services Requested: - No specific OEMs or products; focus is on consulting and assessment services - Three main service line items: - Cybersecurity Risk Assessment & Penetration Testing (2 units) - Network Review & Asset Inventory (2 units) - Compliance Roadmap Development (2 units) - Notable Requirements: - Firms must submit qualifications, relevant experience (especially with municipal governments and critical infrastructure), staff resumes, insurance information, client references, and M/WBE certification if applicable - Submission must include one hard copy and one electronic PDF copy on a USB flash drive; electronic-only submissions are not accepted - M/WBE and Section 3 firms are strongly encouraged to apply - Funding: - Total grant award is $50,000, split equally between water and wastewater facilities - No specific OEMs or vendors are mentioned in the solicitation

Description

The City of Cortland is seeking consulting services for cybersecurity assessment and consulting related to its water and wastewater infrastructure. This project is funded through the New York State SECURE Grant Program with a total award of $50,000, split equally between two facilities. The consultant will perform risk assessments, penetration testing, network reviews, asset inventories, and develop a compliance roadmap aligned with state and federal cybersecurity guidelines and the NIST framework. The solicitation requires firms to submit qualifications, experience, resumes, deliverables, insurance information, client references, and M/WBE certification if applicable. Proposals are due by September 25, 2026, and must be submitted as one hard copy and one electronic copy on a USB flash drive.

View original listing