Ozarks Technical Community College

The buyer seeks cybersecurity consulting services to evaluate their overall security program. The project includes vulnerability assessment, penetration testing, social engineering, and information security program assessment. The consultant will provide detailed reports, remediation recommendations, and present findings to management. All work must be completed by June 30, 2025.

• 9/15/2024 - Written Requests for Interpretation Due
• 9/27/2024 - Proposal Due Date
• 1/1/2025 - Contract Start Date
• 6/30/2025 - Project Completion Deadline

• Conduct vulnerability assessment of network infrastructure and configurations
• Perform external penetration testing on internet perimeter
• Execute social engineering email phishing test targeting up to 1,700 employees
• Assess information security program, including roles, policies, and employee training
• Provide prioritized vulnerability list and remediation recommendations
• Deliver remediation roadmap with budget estimates, timeline, and level of effort
• Present findings to Management or Board of Directors