Cybersecurity Assessment & Penetration Testing

The Regional Transit Authority of New Orleans seeks a qualified cybersecurity vendor to perform a comprehensive vulnerability assessment and penetration testing of its multi‑site transit network, followed by a post‑remediation assessment and a 12‑month virtual CISO advisory service. The contract will be fixed‑price, awarded to the lowest responsible bidder, and will last for an initial one‑year term. • Conduct full‑scope network vulnerability scanning, manual penetration testing, and reporting across all RTA IT assets (≈700 nodes, multiple servers, VOIP, cameras, etc.). • Provide a post‑remediation scan to verify corrective actions and a strategic security roadmap via vCISO support (up to 24‑48 hours of telephone consulting). • Vendor must meet ISO 27001 and SOC 2 Type II compliance, and staff must hold CISSP and/or CEH/CPENT certifications. • No DBE set‑aside, but DBE participation is encouraged; all bids must be submitted electronically or hard‑copy by Nov 3, 2026.