IT Security Audit

The City of Durango is seeking a qualified consultant to perform an IT security audit. The audit should include external vulnerability scanning, penetration testing, and risk assessment, as well as internal vulnerability scanning, penetration testing, and risk assessment. The selected vendor will be expected to provide a report on the findings and recommendations for mitigation. The City is looking for a vendor with at least 5 years of experience in performing similar audits and holds certifications such as OSCP/OSCE. • The vendor should have experience in identifying and mitigating security vulnerabilities. • The vendor should be able to provide a detailed description of the proposed audit methodology. • The vendor should be able to provide examples of previous IT security audits performed. • The vendor should be able to provide a proposed timeline for completing the audit. • The vendor should be able to provide an estimated cost for the audit.