NIST Cybersecurity Framework (CSF) 2.0 Adoption & Maturity Advancement

The Greenville‑Spartanburg Airport District is seeking a qualified cybersecurity firm to lead the structured adoption of the NIST Cybersecurity Framework (CSF) 2.0, advancing its risk‑management maturity from Tier 1 (“Partial”) to Tier 3 (“Repeatable”) across a complex environment that includes enterprise IT, operational technology (OT), industrial control systems (ICS), and physical security systems. • Conduct a comprehensive assessment of current cybersecurity posture across IT, OT, and ICS. • Develop and execute a detailed roadmap to implement NIST CSF 2.0 controls and processes. • Provide training, documentation, and continuous‑improvement guidance to achieve Tier 3 repeatable maturity. • Deliver key artifacts such as gap analysis, updated policies, risk dashboards, and ongoing support plans. • Coordinate closely with airport stakeholders to ensure seamless integration with existing operations.