Information Technology & SCADA Cybersecurity Incident Response Plans

The North Texas Municipal Water District (NTMWD) is seeking proposals for comprehensive cybersecurity Incident Response Plans (IRP), Business Continuity Plans, and Disaster Recovery Plans for both SCADA and enterprise IT systems through RFP No. 25-215-P. The procurement targets contractors with expertise in developing detailed cybersecurity plans for Industrial Control Systems (ICS), Operational Technology (OT), and Information Technology (IT) networks, with specific requirements to comply with NIST standards including SP 800-53 Revision 5, SP 800-61 Revision 2, and SP 800-82 Revisions 2 and 3. Key deliverables include draft plans due by June 30th and final plans by August 31st of the current fiscal year, with contractors responsible for identifying critical assets, conducting risk analyses, developing recovery resources, and providing staff training. The pre-proposal meeting is scheduled for September 5, 2025, at 1:00 PM Central, with proposals due by September 18, 2025, at 10:00 AM Central. Evaluation criteria will assess company overview and qualifications (35%), methodology and approach (30%), prior experience (15%), and pricing (20%), with the initial contract term set for one year and potential automatic renewals for four additional one-year periods, not to exceed five years total.

Vendors must submit proposals electronically through ntmwd.bonfirehub.com or via mail to the NTMWD Procurement Department in Wylie, Texas, with primary contact Hannah Mulla. The procurement includes a cooperative purchasing provision allowing other local governmental entities to potentially participate in the contract. Vendors must complete mandatory forms verifying compliance with Texas Government Code, including non-discrimination provisions and attestations regarding boycotts of energy companies or firearm industries. Insurance requirements mandate professional liability coverage of $1,000,000, with additional standard commercial insurance provisions. While no specific set-aside designations for disadvantaged enterprises are explicitly mentioned, the RFP indicates an open competition for qualified cybersecurity and IT planning firms. Although no incumbent vendor is listed, the project appears to be establishing new comprehensive cybersecurity planning frameworks for the water district's critical infrastructure. While a specific budget range is not disclosed, the comprehensive nature of the project and the detailed technical requirements suggest a significant investment in cybersecurity planning and implementation.