Dept. of Comm. Supervision Security Assessment

The Georgia Technology Authority is awarding a contract to perform a comprehensive cybersecurity assessment of the Department of Community Supervision's incident response capabilities and IT security control implementations, with an anticipated award date of March 31, 2022. This solicitation is limited to qualified contractors previously awarded through RFQC 9800-000000-3088; new competitors cannot respond.

The scope spans approximately 1,845 users across 65 locations operating in Google Cloud enterprise (G Suite) and Amazon Web Services environments, including the Georgia Reentry Portal application. The contractor must evaluate IT security program controls in cloud and on-premises settings against Center for Internet Security Top 20 Controls and NIST SP 800-53 standards. Project duration is six to eight weeks post-award, with engagement launch required within one week of Purchase Order issuance and initial consultations commencing within 10 working days. Deliverables include a Security Assessment Plan, Security Final Reports with resource details, gap analysis, Plan of Action and Milestones, Risk Assessment Report, Agency Executive Summary, and close-out presentation. All engagement data must reside within United States legal jurisdiction and maintain minimum NIST Moderate-level data protection controls.

Evaluation uses a 1,000-point scale: Statement of Work and Security Assessment Plan (200 points), Resumes (150 points), Sample Reports (200 points), Engagement Tools (150 points), and Price Proposal (300 points). The lowest responsive bid receives maximum price points with others receiving prorated scores. Offerors must provide redacted samples of previous reports from engagements completed within the past 48 months and demonstrate at least one prior CIS 20 Critical Controls assessment.

All contractor personnel with access to sensitive data must complete Georgia Bureau of Investigations fingerprint-based background checks and security awareness training at contractor expense. Responses are due February 18, 2022 at 2:00 PM EST. Questions closed February 3, 2022 at 2:00 PM EST.