Administrative Office Of The Courts

The buyer is seeking proposals for consulting services to perform a cybersecurity risk assessment of their current information security controls and practices. The assessment will include a review of the vulnerability management program. The buyer requires the successful offeror to measure implemented controls against the NIST Cybersecurity Framework and provide comprehensive reports with recommendations. The project must be completed by February 1, 2025.

• 4/17/2024 - Issue Date
• 5/1/2024 - Oral Presentations
• 6/16/2024 - Proposal Due Date

• Five years of experience performing cybersecurity risk assessments of similar size and scope

• Conduct cybersecurity risk assessment against NIST Cybersecurity Framework
• Review vulnerability management program processes and procedures
• Measure implemented controls against NIST CSF categories
• Use CMMI rating definitions to score controls
• Review NIST CSF assessment data from previous years
• Provide executive and technical reports with recommendations
• Deliver CMMI Integrations Rating Definitions Report
• Conduct virtual presentation of final assessment and reports