Vulnerability Scanning and Assessment Tool

Fulton County Georgia issued an RFP for a vulnerability scanning and assessment tool on September 15, 2022 with an original proposal due date of October 20, 2022; however, Addendum No. 2 extended the deadline to November 3, 2022 at 11:00 a.m. The County subsequently rejected all proposals on January 6, 2023 and indicated new solicitation documents would be available.

The scope requires a tool supporting complete asset visibility, vulnerability scanning and classification, risk identification and ranking, and comprehensive reporting from executive to investigative levels, including compliance reporting. The solution must support multiple deployment options (cloud-hosted, on-premises, virtualized, managed service) and integrate with existing infrastructure including NAC solutions, MDM/configuration management, ticketing systems, and SIEM solutions. Vendors must provide 24/7/365 customer support with at least three tiered support levels.

The contract term commences upon execution in 2022 and runs through December 31, 2022 with three one-year renewal options subject to Board of Commissioners approval. The County does not specify estimated contract value. Fulton County serves approximately 1.01 million residents and employs approximately 5,000 full-time employees.

Evaluation criteria on a 100-point scale are: Project Plan (30%), Qualifications of Key Personnel (20%), Relevant Project Experience/Past Performance (20%), Availability of Key Personnel (15%), Local Preference (5%), Service Disabled Veterans Preference (2%), and Cost Proposal (8%). Award is based on the proposal deemed most advantageous to the County rather than lowest cost alone. All proposals must include proof of E-Verify registration compliance, proof of insurance, and financial statements. A pre-proposal conference was held September 29, 2022 via Zoom. The County reserved the right to conduct oral presentations and reject any or all proposals. No proposal bond or fee is required.