Cybersecurity Evaluation and Enhancements

Closed State & local contract opportunity Posted

Solicitation number
RFQ033604
State
Ohio
Responses due

Opportunity facts

Jurisdiction

Updated .

About this opportunity

The City of Columbus, Ohio, Department of Technology is soliciting proposals for cybersecurity evaluation and enhancement services under a two-phase controlled-disclosure RFQ, with Phase 1 NDA submissions due September 22, 2026 at 1:00 PM and Phase 2 proposals anticipated to be advertised the week of October 5, 2026 with a three-week response window. This is a gatekeeping procurement under Ohio Revised Code Section 9.64 and Columbus City Council Ordinance 1700-2026: potential offerors must execute a Mutual Non-Disclosure Agreement by the Phase 1 deadline to access the complete bid package, including sensitive cybersecurity and infrastructure information regarding network architecture, security controls, known vulnerabilities, and operational safeguards.

The scope encompasses assessment, testing, and strengthening of cybersecurity controls applied to critical IT infrastructure and applications, with configuration, implementation, and continuous support services to advance the Department of Technology's next-generation cybersecurity program. Detailed scope specifications will be provided in Phase 2 documentation following NDA execution.

Vendors must be registered on the Columbus Vendor Services portal (columbusvendorservices.powerappsportals.com) and contract compliant, including completion of the EBO Contract Compliance Questionnaire and MBE/WBE certification as applicable under Title 39 of the Columbus City Codes. Phase 1 requires submission of company name, address, contact information, and a placeholder bid amount of $1 through the Vendor Services portal; no pricing evaluation occurs until Phase 2. Phase 2 submissions and all question-and-answer periods will occur through the Bonfire portal at columbus.bonfirehub.com. Specification questions for Phase 1 are due September 10, 2026 at 1:00 PM. Subcontractors and teaming partners are permitted but must comply with NDA flow-down requirements and obtain Title 39 certification before contract execution. NDA execution does not guarantee award or continued participation.

Opportunity text

Scope: The City of Columbus, Department of Technology will be receiving proposals for CYBERSECURITY EVALUATION AND ENHANCEMENT SERVICES. The intent of this contract is to provide the Department of Technology with readily available resources, including the people, processes and practices to assess, test, articulate and strengthen cybersecurity controls applied to critical IT infrastructure and applications. The collaborative works will involve the configuration, implementation, and continuous support services for the next iteration of Cybersecurity within the Department of Technology. This Request for Proposal falls under the Ohio Revised Code §§9.64 and contains confidential infrastructure and cybersecurity records of the City of Columbus. These records may include sensitive information regarding the City's cybersecurity program, network architecture, security controls, infrastructure configuration, and related operational safeguards. Therefore, the bid package will only be provided to potential offerors that execute the Non-Disclosure Agreement included in this solicitation. Potential offers have until September 22, 2026 @ 1:00 PM to submit a signed NDA to respond to this RFQ. Once the RFQ end time has passed offerors who have submitted a signed NDA will receive an email link to Bonfire for the complete bid package. An account on Bonfire https://columbus.bonfirehub.com/login will be necessary to access the documents. Only invited offerors who have completed the NDA will be able to submit proposals for this project. All subsequent question and answer periods and proposals will be submitted through the Bonfire portal. By executing the NDA, the offeror acknowledges and agrees that: • The materials contain sensitive cybersecurity and infrastructure information of the City of Columbus. • The information will be used solely for the purpose of preparing and submitting a response to this solicitation. • The information may not be disclosed, reproduced, distributed, or used for any purpose other than preparation of a proposal in response to this solicitation, except as permitted under the executed NDA. • Access to the information may be limited only to employees, subcontractors, consultants, or agents of the offeror who have a legitimate need to know the information for purposes of preparing the proposal and who are bound by confidentiality obligations no less restrictive than those contained in the NDA. See attached bid documents for complete project schedule and detailed response instructions.

Files

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Similar opportunities
  • Ask GovTribe AI about this opportunity