RFP - Network Security Audit and Vulnerability Assessment

Closed State & local contract opportunity Posted

Solicitation number
PE-29016-NONST-2025-000000034
State
Georgia
Responses due

Opportunity facts

Jurisdiction
UNSPSC codes
Show all 32
Point of contact

Opportunity details come from ssl.doas.state.ga.us. Updated .

About this opportunity

Written by GovTribe AI ·

The Atlanta Regional Commission (ARC) is seeking a qualified independent service provider to conduct a comprehensive Network Security Audit and Vulnerability Assessment for their IT infrastructure. The procurement is a Request for Proposals (RFP) issued for Fulton County, Georgia, with proposals due by 5:00 p.m. EST on May 23, 2025. The project requires a vendor to perform an extensive security assessment covering edge security, network security, systems security, access management, and disaster recovery across ARC's technology environment. Specific deliverables include a findings document detailing network vulnerabilities, a risk analysis with prioritized risks, and a roadmap outlining recommended technologies and best practices for improving the agency's security model. The vendor must have Computer Information Security Audit (CISA) certified experts and provide three references from previous similar projects. Key objectives include conducting port scans, reviewing firewall policies, assessing wireless security, examining authentication methods, and performing disaster recovery drills. The initial vulnerability assessment is expected to be completed within 30 days, with disaster recovery exercises continuing through the end of the year.

The RFP does not specify any explicit set-aside designations or restrictions for disadvantaged enterprises. The project will cover ARC's network infrastructure, which includes 10 layer 2 switches, 51 virtual servers, 4 domain controllers, 22 access points, and 220 end users across Windows and Mac platforms. The total compensation for the project is not to exceed $40,000, to be paid through monthly progress payments upon submission of invoices. The selected vendor will be required to deliver comprehensive findings, a risk analysis, a security roadmap, and conduct executive presentations and tabletop exercises with the organization's Cyber Response Team (CRT). No incumbent vendors or current contractors are mentioned in the documentation. The procurement emphasizes the need for a detailed evaluation of security measures, with a focus on identifying vulnerabilities and providing strategic recommendations to improve the agency's overall security posture. Interested vendors should visit https://atlantaregional.org/procurement/network-security-audit-and-vulnerability-assessment/ for additional information about the contract opportunity.

Opportunity text

Atlanta Regional Commission (ARC) is soliciting proposals from qualified independent service providers with security assessment experience sufficient to perform a Network Security Audit and Vulnerability Assessment in accordance with the specifications outlined in this document. Deliverables from the assessment must include a findings document to include any non-compliant network vulnerabilities; a risk analysis listing the priority of each risk or vulnerability identified (i.e. high/med/low) and a roadmap document outlining technologies and best practices that the Agency should focus on to improve its security model. ARC is not looking for a SOC¿s Team to take over security operations. ** GO TO https://atlantaregional.org/procurement/network-security-audit-and-vulnerability-assessment/ FOR ADDITIONAL INFORMATION**

Files

File Type Posted
Request for Proposals.pdf PDF

On GovTribe

Work this opportunity

  • Track it in your pipeline
  • Similar opportunities
  • Ask GovTribe AI about this opportunity
Try for free Login