Department Of Financial Protection And Innovation

The buyer seeks consultants to assist with cybersecurity examination services and incident assessment for licensees. The consultant will provide expert advice on cybersecurity examinations, coach examiners, and help establish a comprehensive information security and technology examination program. Services include evaluating cyber defense policies, performing risk analyses, and reviewing security postures. The contract is for two years with a possible one-year extension.

• 9/23/2024 - Written Questions Due
• 9/24/2024 - DFPI's Responses to Questions
• 10/1/2024 - Proposal Due Date
• 10/22/2024 - Anticipated Contract Award
• 10/23/2024 - Anticipated Start Date

• 3 years experience providing expert advisory services for Cybersecurity examinations
• Experience coaching on assessment of cyber defense policies and compliance
• Experience providing recommendations on technical and nontechnical risk assessments
• Experience providing guidance on security reviews and risk management plans
• Experience collaborating to evaluate security policies and standards
• Possess one or more relevant cybersecurity certifications (e.g. CISSP, CCSP, CISA)

• Provide advisory services for cybersecurity examination
• Coach examiners on assessing cyber defense policies and compliance
• Recommend risk and vulnerability assessments of relevant technology
• Guide security reviews and security risk management plan development
• Collaborate to evaluate adequacy of security policies and standards
• Review data to determine organization's cybersecurity posture
• Verify and document security posture implementation
• Assist in establishing Information Security and Technology Examination program
• Train examiners on reviewing technical documentation
• Advise on technological tools for effective IS&T program