RFP489 - Network Security Audit and Vulnerability Assessment

The Atlanta Regional Commission (ARC) is seeking a qualified service provider to conduct a comprehensive Network Security Audit and Vulnerability Assessment. The assessment should evaluate the maturity of ARC's information security program and provide expert technical guidance to improve security posture and operational efficiency. The selected vendor will perform a comprehensive audit addressing edge security, network security, systems security, access management, and disaster recovery. Deliverables include a findings and assessment report, risk analysis, security roadmap, executive presentation, and ongoing vulnerability risk assessments. • The assessment should identify all non-compliant network vulnerabilities and provide actionable recommendations to improve security. • The vendor should have demonstrated experience in cybersecurity assessments and provide a detailed technical approach for accomplishing the scope of work. • The proposal should include a proposed cost breakdown, and the maximum contract value should not exceed $45,000. • The vendor should be prepared to begin work immediately upon contract execution and complete the project within the estimated project duration of 30 days for the vulnerability assessment and risk assessment activities, and by the end of the calendar year for disaster recovery drills and tabletop exercises.