CIP-005-7 and CIP-007-6 OT Firewall Infrastructure and Compliance Assessment

The City of Lakeland is seeking a qualified Consultant to conduct an independent evaluation of its Operational Technology (OT) network and perform a comprehensive gap analysis with respect to NERC CIP-005-7 and CIP-007-6 R4 & R5 compliance requirements, as applicable to firewalls and firewall infrastructure only. The Consultant shall assess the City's current compliance and security posture, identify compliance gaps and security risk related to Electronic Security Perimeter and firewall controls, and provide clear, actionable and prioritized recommendations to remediate identified deficiencies. The scope of work includes a comprehensive Firewall Ruleset Analysis, review of existing compliance program documents, and collaboration with the City to cure findings. The Consultant shall provide a Final Report, Gap Analysis, and raw data collected during the review. • The Consultant shall have relevant experience and qualifications in NERC CIP compliance. • The Consultant shall provide a detailed project plan, including a timeline with key activities and deliverables. • The Consultant shall provide estimated total cost of travel expenses and a firm total cost to perform the scope of work. • The Consultant shall ensure that all subcontractors have undergone the CIP-004-6 R3 Personal Risk Assessment requirement prior to commencement of services.