Security Audit

The Metropolitan Community College (MO) is seeking a consultant to provide a Security Audit for the Information Technology department. The primary objective is to select one or more companies and subject matter experts that will contract with MCC to provide a general IT audit and internal/external penetration testing of MCC's network and security controls. The selected consultant will provide the college with a Risk Register, Roadmap, and mitigation/remediation tactics to address the gaps and/or vulnerabilities. • The scope of work includes evaluating the college's IT organizational structure, policies, and procedures for managing IT resources, including data security, governance, risk management, and compliance. • The consultant will also evaluate the college's IT infrastructure, including hardware, software, and networks, as well as its IT operations, including system administration, maintenance, and monitoring. • The consultant will provide a written assessment report, a risk register, and a roadmap for actionable goals and risk-mitigation strategies. • The consultant will also provide training and awareness programs to ensure that faculty, staff, and students are aware of their IT responsibilities, risks, and best practices.