Business Impact Analysis (BIA) and Disaster Recovery Plan (DRP) Development

The Florida Department of Juvenile Justice (DJJ) is seeking a qualified vendor to conduct a comprehensive Business Impact Analysis (BIA) and develop a Disaster Recovery Plan (DRP) for the agency. The procurement targets a vendor capable of identifying mission-critical business operations, assessing potential disruption scenarios, and establishing robust recovery frameworks aligned with state and federal cybersecurity standards. Key deliverables include a stakeholder interview summary, critical function inventory, impact analysis report, draft and final disaster recovery plans, and training materials. The project requires detailed mapping of critical dependencies, development of Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs), and comprehensive documentation of recovery strategies for IT systems. The contract is scheduled to begin on August 1, 2025, or upon purchase order issuance, and will conclude on February 28, 2026, with a submission deadline of June 4, 2025. Vendor requirements include strict compliance with CJIS, HIPAA, and state regulations, with mandatory adherence to NIST Cybersecurity Framework 2.0 and Florida Cybersecurity Standards.

While no specific set-aside designations for disadvantaged enterprises are explicitly mentioned, the procurement is open to qualified vendors capable of meeting complex technical and regulatory requirements. The project will be conducted at the DJJ Office of Administration in Tallahassee and involves comprehensive analysis of the agency's IT systems, with a focus on protecting sensitive juvenile records and ensuring organizational resilience. The contract's performance and funding are contingent upon annual legislative appropriation and satisfactory contractor performance. No specific budget range or incumbent vendor is disclosed in the documentation. Vendors must demonstrate expertise in business continuity planning, cybersecurity, and the ability to handle encrypted data storage and secure systems. All project personnel will be required to sign non-disclosure agreements, indicating the sensitive nature of the work with the Department of Juvenile Justice.