District Cybersecurity Assessment-Purchase

Chippewa Valley Schools in Clinton Township, Michigan, is seeking a comprehensive cybersecurity assessment through Request for Proposal (RFP) 9.2425, targeting an internal network vulnerability evaluation across 23 buildings with 1,500 wireless access points. The primary procurement focuses on an internal network security assessment, with an optional external network assessment contingent on available funding. Deliverables include detailed vulnerability reports, executive summaries, technical remediation documentation, technical staff debrief meetings, and stakeholder presentations. The project requires a vendor to conduct authenticated and unauthenticated testing with a particular emphasis on student-initiated threats, operating within a hybrid Active Directory/Azure AD environment with Windows 10/11 devices. Key procurement dates include a pre-bid meeting held on January 9, 2025, bid submission deadline of February 7, 2025, at 10:00 a.m. EST, and a project completion deadline of June 30, 2025. The district requires bidders to submit signed Affidavits for School Safety and Iran Linked Business disclosure, with proposals missing these documents being automatically disqualified.

The cybersecurity assessment opportunity is funded through the federal State and Local Cybersecurity Grant program, with an approximate budget of $27,000, potentially supplemented by additional operational funds. While no specific set-aside designations were explicitly mentioned, the district indicates a preference for vendors with K-12 reference experience and explicitly requires that selected vendors cannot be banned from federal government work. The technological environment includes Windows servers, InTune and CCM for device management, and 6 SSIDs across the wireless network, with a preference for vendors utilizing CIS Controls. Bidders must provide separate line-item pricing for internal and external assessments, allowing the district flexibility in service selection. Insurance requirements are substantial, mandating $1 million in commercial general liability, $1 million in automobile liability, and $2 million in employer's umbrella liability coverage, with Chippewa Valley Schools listed as an additional insured. The district is tax-exempt and will provide a tax exemption certificate upon request. External testing, cloud resources, application testing, phishing simulations, and backup assessments are explicitly excluded from the base project scope but may be offered as voluntary alternates.