Description
The Department of Enterprise Services is conducting a competitive procurement to establish and award multiple professional service statewide contracts for Information and Cybersecurity Services. The contracts will be utilized by Washington State agencies and other eligible purchasers. The services include various tasks and deliverables such as assessment of the current security posture, risk, gap identification and analysis, security audits, compliance, training, testing, incident consulting and digital forensics, implementation, compliance, data protection, strategy, governance and development of comprehensive customized policies. Bidders may bid on one, multiple, or all specified Contract Categories.
* Contract Category A – Policy Development: Services include assessing the current security posture, identifying gaps, and developing comprehensive policies.
* Contract Category B – Risk Management and Assessment: Services include assessing risks, identifying gaps, and developing comprehensive remediation plans.
* Contract Category C – Security Audits and Compliance: Services include performing security audits to ensure compliance with industry standards.
* Contract Category D – Penetration Testing and Vulnerability Assessments: Services include identifying weaknesses in systems, networks, and applications and addressing security gaps proactively.
* Contract Category E – Incident Consulting and Digital Forensics: Services include guiding post-incident response reviews, conducting digital forensics reviews, and assisting with the development and implementation of incident response plans and playbooks.
* Contract Category F – Data Protection and Privacy: Services include developing data protection strategies and policies and ensuring compliance with data protection regulations and standards.
* Contract Category G – Identity and Access Management (IAM): Services include designing and implementing IAM solutions.
* Contract Category H – Cloud Security: Services include offering cloud security assessments and best practices.
* Contract Category I – Cybersecurity Strategy and Governance: Services include developing comprehensive cybersecurity strategies aligned with the Purchaser’s operational goals.
* Contract Category J – IoT and OT Security: Services include securing the Internet of Things (IoT) and Operational Technology (OT) environments.
* Contract Category K – Cybersecurity Staff Augmentation: Services include providing staff to augment cybersecurity teams.