New Orleans Regional Transit Authority Procureware #IFB 2026-030

Cybersecurity Assessment & Penetration Testing for New Orleans Regional Transit Authority

The Regional Transit Authority of New Orleans (RTA) is seeking qualified cybersecurity vendors to deliver a comprehensive vulnerability assessment and penetration testing across its IT infrastructure. - Government Buyer: - Regional Transit Authority of New Orleans (RTA) - Scope of Services: - Initial vulnerability assessment and penetration testing covering approximately 700+ nodes across multiple sites - Post-remediation vulnerability assessment to validate fixes - 12 months of virtual Chief Information Security Officer (vCISO) telephone support (up to 48 hours) - OEMs & Vendors: - No specific OEMs named; several interested vendors include Allied IT Systems, Asimer Tech LLC, Consult Hyperion, Cybrbase, Inc., Evalv IQ, Innovative IT Partners, Inspira Enterprise, Inc., Major Services, Inc., and PWXpress - Products/Services Requested: - Vulnerability Assessment & Penetration Testing Services (1 unit) - Post-Remediation Vulnerability Assessment (1 unit) - vCISO Support (1 unit, 12 months, up to 48 hours) - Unique/Notable Requirements: - Vendor must be ISO/IEC 27001 and SOC 2 Type II compliant - Personnel must hold certifications such as CISSP, CEH, CPENT - vCISO must demonstrate documented experience and qualifications - Solution must align with NIST guidelines and industry best practices - Experience in public transportation cybersecurity is preferred - DBE participation is encouraged, but no specific goal is set

Description

The New Orleans Regional Transit Authority (RTA) is soliciting bids for cybersecurity vulnerability assessment and penetration testing services. The scope includes identifying and mitigating vulnerabilities to protect against data exposure, breaches, and performance impacts, following National Institute of Standards and Technology (NIST) guidelines. Services include an initial vulnerability assessment with penetration testing, a post-remediation vulnerability assessment, and 12 months of virtual Chief Information Security Officer (vCISO) telephone support. Bidders must submit responses by November 3, 2026, and comply with specified certifications and experience requirements.

View original listing