Information Security Governance & Policy Framework Development

The City of Florissant, Missouri is seeking a qualified cybersecurity consulting firm to develop a comprehensive Information Security Governance Framework, including policies, standards, and operational procedures. The selected consultant will evaluate the City's existing information security practices, develop a formal Information Security Policy Framework, and provide documentation to support cybersecurity insurance requirements and potential security audits. The project objectives include evaluating the City's existing information security practices, developing a formal Information Security Policy Framework, producing written security policies, standards, and procedures, and ensuring alignment with recognized cybersecurity frameworks and applicable regulatory requirements. Some key aspects of the project include: • Evaluating the City's existing technology environment and documentation • Developing a formal policy framework, including policies such as Information Security Policy, Acceptable Use Policy, and Incident Response Policy • Developing technical standards supporting the policies, such as password and authentication standards, multi-factor authentication requirements, and encryption standards • Assisting in developing operational documentation, including new user provisioning procedures, employee termination procedures, and incident response procedures • Considering regulatory or operational environments, such as CJIS Security Policy, Payment Card Industry (PCI DSS) considerations, and cybersecurity insurance requirements