Cybersecurity and Physical Security Assessment

The State of West Virginia, through the School of Osteopathic Medicine (SOM) located in Greenbrier County, is soliciting proposals for a Cybersecurity and Physical Security Assessment via Agency Request for Quote (ARFQ) number 0476 SOM2600000003. This miscellaneous procurement through an Agency Purchase Order process seeks a comprehensive evaluation of the institution's current security posture across both information technology and physical infrastructure at its Lewisburg, West Virginia location (400 North Lee Street). The assessment must include detailed vulnerability analyses, risk assessments, security recommendations, and implementation roadmaps, with deliverables encompassing on-site evaluations, documentation reviews, stakeholder interviews, and a detailed final report with prioritized remediation strategies. The successful vendor must demonstrate qualified security assessment professional credentials with relevant certifications and experience in both cybersecurity and physical security domains. Key evaluation will focus on the assessment of critical systems, network infrastructure, data protection mechanisms, physical access controls, and security policies. Proposals are due by April 13, 2026, at 3:30 PM, with the posting date of March 9, 2026. Interested vendors should direct inquiries to the buyer, Kerry M. Lemon, at 304-647-6302 or klemon@osteo.wvsom.edu.

The available solicitation documentation does not identify any set-aside designations, incumbent vendors, or specific restrictions on the types of organizations eligible to respond. No specific set-asides for disadvantaged enterprises, minority-owned businesses, or other protected classifications are noted in the procurement materials. Similarly, no existing infrastructure requirements for technology integration or incumbent contractor information has been documented. The solicitation materials do not specify pricing information, contract award amounts, or budget ranges for this assessment. Contract term and renewal options are not detailed in the available documentation. Prospective bidders should contact the listed buyer for additional clarification regarding budget parameters, contract duration, and any specific technical or organizational requirements not explicitly stated in the initial solicitation materials.