City of Sebastian MyVendorLink #RFP 26-067-SH

Kissimmee Utility Authority cybersecurity testing and risk assessment services

Kissimmee Utility Authority is seeking cybersecurity testing and risk-assessment services to identify weaknesses and guide remediation. - Buyer: Kissimmee Utility Authority (KUA), Information Technology Department, Kissimmee, Florida. - Solicitation: RFP 26-067-SH for cybersecurity assessment services. - Services requested: - Internal and external network penetration testing, including black-box and white-box testing. - Vulnerability scanning and assessments of public-facing infrastructure, wired and wireless networks, and internal systems. - Cybersecurity risk analysis and prioritization, plus a review of existing policies, procedures, and security controls. - Executive, technical, and detailed findings reports with remediation recommendations. - Return-visit or remote validation testing to confirm remediation. - Important requirements: Align work with the NIST Cybersecurity Framework 2.0; protect confidential information; follow approved procedures and industry best practices; coordinate testing with KUA and minimize operational disruption. Operational Technology (OT) and SCADA systems are excluded. - OEMs and vendors: No service provider or OEM is named in the opportunity.

Description

Kissimmee Utility Authority (KUA) is seeking qualified firms to provide cybersecurity penetration testing, vulnerability scanning, and risk analysis services. Work includes internal and external network penetration testing, black-box and white-box testing, vulnerability assessments, review of security policies and controls, and reports with findings and remediation recommendations. The contractor must coordinate testing with KUA, minimize disruption, protect confidential information, and follow approved procedures and the NIST Cybersecurity Framework 2.0. OT and SCADA systems are excluded, and return or remote validation testing is required to verify remediation.

View original listing