MyVendorLink #RFP 26-067-SH

Kissimmee Utility Authority cybersecurity testing and risk analysis services

Kissimmee Utility Authority is seeking firms to assess cybersecurity risks across its IT environment. - Buyer: Kissimmee Utility Authority (KUA), Information Technology Department, Kissimmee, Osceola County, Florida. - Requested service: Internal and external penetration testing, including black-box and white-box testing; vulnerability scanning and assessment of public-facing infrastructure, wired and wireless networks, and internal systems; cybersecurity risk analysis; and review of existing policies, procedures, and security controls. - Deliverables and requirements: Provide risk assessments, findings, remediation recommendations, an Executive Summary, Technical Review, and Detailed Findings Report, followed by return-visit or remote validation testing. Follow approved testing procedures and the NIST Cybersecurity Framework 2.0, protect confidential information, minimize operational disruption, and coordinate work with KUA. - Scope exclusion: Operational Technology (OT) and SCADA systems are excluded. - Named planholders: AdvancedBITS, Inc.; allied; Alteration Consulting LLC; Apollo Information Systems Corp; Arctiq, Inc.; Ardent Technologies, Inc.; Avixum, Inc.; BlueAlly Technology Solutions, LLC; C.D.S. Office Systems; Catalisto LLC; DOF Creations LLC; Epik Solutions; Image Technology Resources; JANUS Software, Inc.; Motorola Solutions Inc.; Nexcore Secure Inc; Orion Systems Integrators, LLC; Sinnott Wolach Technology Group, Inc.; Spectrum; Xerox IT Solutions Inc; and Z7 Solutions. These organizations are listed as planholders, not as selected or awarded vendors. - OEMs and line-item details: No OEMs, products, part numbers, or quantities are specified. The procurement lists one cybersecurity services requirement without a stated quantity or price.

Description

Kissimmee Utility Authority (KUA) is seeking qualified firms to provide cybersecurity penetration testing, vulnerability scanning, and risk analysis services. Work includes internal and external penetration tests, black box and white box testing, assessments of public-facing infrastructure, networks and internal systems, and evaluation of cybersecurity policies and controls. The contractor must deliver findings, risk assessments, remediation recommendations, and reports, and validate remediation through a return visit or remote testing. Services must follow approved procedures and NIST Cybersecurity Framework 2.0, minimize operational disruption, and exclude Operational Technology and SCADA systems.

View original listing