Cybersecurity Ratings & Supply Chain Management

The Cleveland Metropolitan School District (CMSD) in Cuyahoga County, Ohio, has issued Request for Proposal (RFP) #RFP-21429 for comprehensive cybersecurity ratings and supply chain management services. The procurement seeks a vendor to provide a sophisticated platform with capabilities including supply chain detection and response, third-party cyber risk management, security questionnaires, and a comprehensive portal/dashboard. Key technical requirements include integration with existing security systems, high accuracy in vulnerability identification, a user-friendly interface, and a scalable platform. The selected vendor must demonstrate the ability to assess, manage, and reduce cybersecurity risks by evaluating security posture and mitigating third-party risks. Specific performance expectations include 24/7 support with 99.999% uptime, same-day response times, and maintenance support during normal business hours (6am-6pm EST). Proposal questions were due by August 15, 2025, with final responses required by September 5, 2025 at 12:00 pm, and the contract term spanning from October 1, 2025, through September 30, 2028, with potential two one-year renewals extending through September 30, 2030.

The procurement includes a commitment to diversity, with Diversity Business Enterprise (DBE) participation goals ranging from 15-20% depending on the contract type. The project is funded through a combination of local funds and the Federal Cybersecurity Pilot Program, requiring vendors to demonstrate knowledge of and compliance with current program eligibility requirements. Vendors must complete a comprehensive pricing sheet that details product information, including part numbers, descriptions, quantities, unit costs, and total costs, with specific instructions for annualizing pricing. While specific award values are not explicitly stated, the multi-year contract structure and federal funding suggest a significant potential contract value. The RFP indicates that the successful vendor will need to provide a platform that not only meets technical specifications but also aligns with the district's cybersecurity risk management strategies, with an emphasis on comprehensive threat intelligence and supply chain security monitoring.