City of Corona SCADA Cybersecurity Assessment Project

The City of Corona is seeking a qualified consulting firm to perform a comprehensive cybersecurity assessment of its SCADA/OT infrastructure used by the Utilities Department. The effort is structured into four phases: (1) full inventory and technical assessment of all SCADA hardware, software, and network elements; (2) development of a best‑practice security handbook aligned with NIST 800‑82, ISA/IEC 62443 and CISA guidance; (3) recommendation of specific hardware/software upgrades and compensating controls; and (4) creation of a multi‑year redesign and implementation roadmap. The contract is for approximately one year, with a not‑to‑exceed fee and a 90‑day proposal validity. Evaluation will be based on firm qualifications, personnel expertise, technical approach, and cost, with a possible interview component. • Conduct on‑site walkthroughs of 7 radio towers, 4 water‑treatment plants, 3 reclamation plants, and ~90 remote sites. • Deliver detailed inventory, risk assessment, best‑practice guidance, upgrade cost estimates, and a 2‑5‑year implementation roadmap. • Must meet extensive insurance, OSHA safety‑record, licensing, and conflict‑of‑interest requirements and submit all forms electronically via PlanetBids.