Cyber Security Managed Services

The City of Santa Monica is seeking a qualified firm to provide Cybersecurity Managed Services to enhance the security of the City's network, systems, and applications. The selected firm will be responsible for delivering comprehensive cybersecurity services, including penetration testing, risk assessments, security policy review, incident response exercises, and ongoing security management. The contract will be for an initial term of five years, with two options for renewal of one year each. The City operates a complex IT environment, managing approximately 8,000 devices/IPs, a variety of business applications, and a hybrid infrastructure of on-premises and cloud-based systems. Key services to be provided include: * Penetration testing services * Cybersecurity assessment * Cybersecurity tabletop exercises * Disaster recovery and incident response * Risk management * Business application and risk review * Optional services such as cybersecurity training and phishing simulation management, vulnerability management services, web application penetration testing, security policy review, and cybersecurity grant management.