Environmental School of Science and Forestry

Buyer seeks cybersecurity services for 36 months. Services include vCISO strategy and governance, NIST 800-171 risk assessment update, incident response tabletop exercise, and incident response retainer. Buyer aims to mature their cybersecurity efforts, stay updated on compliance requirements, and reduce likelihood and impact of cybersecurity incidents. Buyer serves 2000 students through online, hybrid, and in-person instruction.

• 9/10/2024 - Mini-Bid Release
• 9/18/2024 - Contractor Question Period End
• 10/1/2024 - Mini-Bid Response Due Date
• 10/1/2024 - Proposal Due Date
• 11/1/2024 - Project Start Date

• vCISO that has higher Education and/or SUNY experience

• Provide vCISO strategy and governance
• Update NIST 800-171 risk assessment
• Conduct incident response tabletop exercise
• Provide incident response retainer services
• Align business and cyber functions through risk management process
• Advise on security program challenges
• Present cybersecurity insights to senior management and board
• Identify and prioritize cybersecurity risks
• Develop prioritized list of top risks and mitigation plan
• Test organization's incident response capability