DSU Phishing & Security Awareness for Small Business

Dakota State University (DSU) is conducting a Request for Proposal (RFP) on behalf of the State of South Dakota, specifically targeting Jerauld County, to secure a vendor for a phishing and security awareness program for small businesses. The procurement seeks a partner with an existing KnowBe4 license or similar cybersecurity training platform to establish, manage, and report on phishing assessment programs. The primary objective is to help small businesses mitigate cybersecurity risks, with a focus on preventing phishing attacks that can cause financial and reputational damage. Key deliverables include setting up customized security awareness programs, conducting phishing assessments, and providing comprehensive reporting for participating small businesses. The RFP requires vendors to demonstrate expertise in cybersecurity training and the ability to implement targeted phishing prevention strategies. Proposal submissions are due by October 17, 2022, with inquiries accepted via email to Ashley Podhradsky at SBACyber@dsu.edu until a specified deadline. The contract period is anticipated to run through August 30, 2023, with no specified renewal options.

The RFP does not explicitly mention specific set-aside designations or restrictions on respondent types. No incumbent vendors are identified in the available documentation. The procurement is funded through a U.S. Small Business Administration award, suggesting potential preference for vendors with strong small business cybersecurity expertise. While specific budget ranges are not detailed, the RFP indicates that the State reserves the right to negotiate final scope of work and compensation with the highest-ranked offeror. The ideal vendor should have demonstrated experience with cybersecurity training platforms, preferably with a KnowBe4 or comparable license, and the capability to support multiple small businesses across South Dakota. The program appears to be a pilot or initial implementation, which may suggest potential for future expansion or additional funding. Vendors will be expected to provide a comprehensive cost proposal detailing pricing for enrollment, management, support, and reporting of phishing and security awareness campaigns.