USA (Norcross, Georgia) – Cybersecurity Assessment, Compliance and Governance Services

(1) Vendor needs to provide cybersecurity assessment, compliance and governance services to the government authority located in Norcross, GA. - Assess current security posture, develop a comprehensive security and compliance framework, and deliver tailored training to our personnel.• Conduct a cybersecurity risk assessment across all departments.• Develop a comprehensive cybersecurity plan in the identification, protection, detection, response and recovery of data.• Present a cybersecurity resiliency roadmap with incorporated deliverables and milestones towards a security strategy that places prioritization on agency’s objectives.• Provide Norcross with increased and enhanced cybersecurity controls for increased visibility and management while strengthening the agency’s overall security posture.- Risk Assessment & Gap Analysis• Evaluate our existing cybersecurity policies, procedures, and controls.• Provide clear guidance and clarification regarding cloud-based platforms in conjunction with necessary security frameworks.- Policy & Framework Development• Access control and identity management (including Multi-Factor Authentication).• Data protection, privacy, and secure cryptographic storage (at rest and in transit).• Incident Response (IR) and Business Continuity / Disaster Recovery (BC/DR) planning.• Vendor and third-party risk management- Training & Implementation Support• Deliver targeted cybersecurity awareness training for general end-users.• Provide advanced operational training for IT staff.• Train-the-Trainer Model: Establish an internal capability by equipping designated personnel to deliver ongoing cybersecurity education within their respective departments.(2) All the questions must be submitted no later than June 29, 2026.(3) An Optional pre-proposal meeting will be held on June 26, 2026.

Onshore (USA Organization Only)

Performance of the work will be offsite.