Cybersecurity Assessment, Compliance, & Governance Services

The City of Norcross Information Technology Department is requesting proposals for cybersecurity assessment, compliance, and governance services under RFP IT 26_10, with proposals due July 7, 2026. Respondents must comply with Georgia's E-Verify requirement under O.C.G.A. 13-10-91 and submit notarized E-Verify Contractor Affidavits confirming federal work authorization registration for the contract duration; subcontractors must provide separate notarized E-Verify Subcontractor Affidavits. Additionally, all applicants must execute a notarized Public Benefit Affidavit verifying lawful presence in the United States and providing a secure and verifiable document as defined by O.C.G.A. 50-36-1(f)(1).

The scope encompasses a comprehensive assessment of the city's current security posture, development of a security and compliance framework, and delivery of tailored training to city personnel. The engagement is structured to establish a sustainable, self-sufficient cybersecurity governance capability within the IT department, with emphasis on knowledge transfer and internal capacity building rather than ongoing managed services. Successful proposals should demonstrate expertise in cybersecurity assessment frameworks, compliance standards relevant to municipal operations, training program development, and experience with municipal clients. Vendors must provide detailed project timelines, resource allocations, and deliverables aligned with governance structure establishment and personnel competency development.

The RFP evaluation will assess vendor qualifications, municipal experience, and proposed methodology. No estimated contract value, contract term, or evaluation weighting is specified in the available materials.