Description
This solicitation seeks a qualified vendor to perform a comprehensive cybersecurity assessment for the Cuyahoga County Board of Health. The scope includes external and internal network penetration testing, security reviews of firewalls, VPNs, routers, switches, servers, workstations, and Azure cloud services, as well as policy reviews to ensure HIPAA compliance and integration with the agency’s Continuity of Operations Plan. The contract is budgeted at $55,000 and will be awarded through a full and open competition RFP process.
• Deliverables: detailed vulnerability assessments, penetration test reports, remediation recommendations, HIPAA Security Rule compliance guidance, and policy update suggestions.
• Technical environment: approximately 512 internal IPs, 2 Palo Alto firewalls, multiple Cisco switches and wireless APs, Azure cloud resources, and a suite of endpoint devices.
• Project timeline: proposals due by October 24 2023; work to commence shortly after award.