ITS for Security Consulting Services

Montgomery County, Pennsylvania is seeking qualified security consulting firms to provide on-call cybersecurity and information security consulting services through Request for Proposal 26-32, with proposals due by June 16, 2026. The County, serving over 860,000 residents across 62 municipalities as the third most populous county in Pennsylvania, aims to strengthen its security posture, reduce cyber risk, and support regulatory compliance through a risk-based, standards-driven approach aligned with the NIST Cybersecurity Framework. The scope of services encompasses governance, risk and compliance assessments; security assessments and testing; incident response and readiness; identity, access, and data protection services; strategic security advisory services; and training and awareness programs, with services potentially including incident response, Managed Security Services (MSSP), strategic security planning, technical assessments, risk management, and advisory services mapped to NIST CSF functions and control families (800-53, 800-73, 800-171). Evaluation criteria, weighted equally, include demonstrated cybersecurity and public-sector experience, quality and practicality of proposed services and engagement approach, cost competitiveness and transparency, and references and past performance. Proposals must be submitted electronically in PDF format through the County's Bonfire (Euna) Portal with technical and cost proposals submitted separately, and written questions regarding the solicitation must be submitted at least seven days prior to the bid opening date. Cost proposals must include hourly rate schedules by role and any volume or service package discounts, and firms must agree to the County's standard terms and conditions without modification.

The procurement encourages proposals from women, minority, and veteran-owned firms as well as locally-based firms, though no additional evaluation weight is provided for these designations. Contractors must maintain comprehensive insurance coverage including commercial general liability of $1,000,000 per occurrence, workers' compensation at Pennsylvania statutory levels, and additional coverages such as professional errors and omissions insurance where applicable. Contracts will be structured as project order agreements under a master on-call contract with individual projects not exceeding $300,000 and a total not-to-exceed amount of $1,000,000 per firm over an initial three-year term, with potential extensions up to five years total. All bidders must submit required certifications and representations including the Public Disclosure Statement, Certification and Representations of Offerors, and Local, Small, and Diverse Business Concern Certification with their proposals, certifying they have not been debarred or suspended from government contracts, have no unresolved audit findings, and comply with all applicable federal, state, and local laws. The contract term commences on the effective date and extends through the specified expiration date, with the County reserving the right to extend terms for up to three additional months under the same terms and conditions, and compensation provided only for services performed to the County's satisfaction with payment issued within thirty days of invoice receipt and acceptance by an authorized representative.