RFP CIT cybersecurity audit

The state and local contract opportunity involves a Request for Proposals (RFP) for a Cybersecurity Audit issued by the Coquille Indian Tribe, targeting their entire Tribal Government IT Environment. The procurement seeks a qualified cybersecurity firm to comprehensively assess the tribe's current security infrastructure, identify potential vulnerabilities, and develop actionable recommendations to strengthen their cybersecurity framework. The proposed audit will encompass multiple critical components, including a pre-audit planning meeting, technical assessment, policy and compliance review, social engineering assessment, and a detailed reporting phase. The tribe's operational scope covers approximately 250+ employees across locations in Coos Bay and Eugene, Oregon, with specific focus on their Ko-Kwel Wellness Center's Medical, Dental, and Behavioral Health divisions. Key evaluation criteria will include the proposer's approach, cost structure, experience working with tribal organizations, project management capabilities, and overall technical competence. The RFP was posted on July 24, 2025, with proposals due by August 26, 2025, at 2:00 PM PST, and an anticipated project start date of October 1, 2025.

The solicitation demonstrates a strong preference for tribal and diverse business participation, with explicit priority given to Indian Owned Businesses (IOB), firms owned by Coquille Tribal members, or other tribal/indigenous businesses. While specific budget details are not explicitly stated, the RFP indicates a not-to-exceed cost structure and requires detailed fee schedule submissions. Comprehensive insurance requirements are mandated, including general liability, automobile, and errors & omissions coverage with specific minimum coverage levels. The tribe reserves the right to select the proposal offering the best overall value, recognizing that cost is just one of several evaluation criteria. Proposers will need to demonstrate robust cybersecurity expertise, particularly in tribal government environments, and provide evidence of their capability to conduct thorough, actionable security assessments. The procurement emphasizes a holistic evaluation approach that considers technical merit, cultural understanding, and potential long-term partnership value beyond mere price considerations.