Cybersecurity Assessment

The State of Florida, specifically the Governing Board of the St. Johns River Water Management District, is seeking the services of an experienced consultancy to assess the effectiveness of the agency's IT security and data governance practices and make recommendations for improvement, including alignment with the NIST Cybersecurity Framework (CSF) as prescribed for state agencies and local governments in sections 282.318, Florida Statutes and NIST FIPS 199. The desired consultancy must have a minimum of five years of experience in cybersecurity consulting and have successfully completed three similar projects within the past three years, with at least one being for a public sector entity in the United States. The District will evaluate proposals based on the respondent's organizational profile, client references, technical qualifications, technical merit, and cost effectiveness. The Invitation to Negotiate (ITN) includes a non-mandatory pre-submittal conference on February 22, 2024, and sets a proposal due date of March 12, 2024. The contract term is from the effective date through September 30, 2025, and the estimated budget for the work is $50,000, although the District reserves the right to increase, decrease, or delete any portion of the work.

The ITN does not specify any set-aside designations or restrictions on the types of organizations that can respond. Additionally, the document does not mention any incumbent vendors or current contractors, nor does it provide information on any existing infrastructure or technology that requires integration. The potential award value is listed as the estimated budget of $50,000, but the District reserves the right to adjust the scope and budget accordingly.