Business Impact Analysis (BIA) and Disaster Recovery Plan (DRP) Development

The Florida Department of Juvenile Justice is seeking a qualified vendor to conduct a comprehensive Business Impact Analysis (BIA) and develop a Disaster Recovery Plan (DRP) for the agency's information technology infrastructure. The procurement targets a vendor who can identify mission-critical business operations, assess potential disruption scenarios, and establish robust recovery strategies aligned with state and federal cybersecurity standards, including NIST Cybersecurity Framework 2.0 and Florida Cybersecurity Standards. Key deliverables include a stakeholder interview summary, critical function inventory, impact analysis report, draft and final disaster recovery plan, and associated training materials. The contract will run from August 1, 2025, to February 28, 2026, with proposals due by June 25, 2025. The vendor must demonstrate expertise in mapping critical dependencies, developing comprehensive recovery strategies, and ensuring operational continuity while maintaining strict data security protocols. Specific project requirements include identifying recovery time and point objectives, ensuring compliance with regulatory requirements, recommending IT system recovery strategies, and validating the disaster recovery plan through simulation or testing.

The contract opportunity does not explicitly specify set-aside designations or restrictions for disadvantaged enterprises. While no incumbent vendor is mentioned, the project requires vendors to have extensive experience in cybersecurity, disaster recovery planning, and handling sensitive government information. The vendor must be prepared to undergo security clearances and adhere to complex data protection standards, including compliance with CJIS, HIPAA, and GDPR regulations. Prospective bidders must demonstrate the capability to securely manage and potentially destroy sensitive juvenile justice system information. The procurement is contingent upon annual legislative appropriation and satisfactory contractor performance. Although a specific budget range is not disclosed in the available documentation, the comprehensive nature of the project suggests a substantial contract value commensurate with the complexity of developing a enterprise-level disaster recovery plan for a state agency.