City and County of Denver

Buyer is seeking a contractor to perform cybersecurity audit services for two identified risks. The first involves assessing the security of the City Clerk and Recorder's systems. The second involves evaluating Active Directory configurations across multiple city agencies. The contractor will conduct penetration testing, configuration analysis, and other security assessments, then provide detailed findings and recommendations.

• 4/22/2025 - RFP Issued
• 5/1/2025 - Deadline to Submit Additional Questions
• 5/7/2025 - Response to Written Questions
• 5/22/2025 - Proposal Due Date

• Staff must have minimum five years cybersecurity auditing experience
• Staff must hold relevant cybersecurity certifications

• Conduct cybersecurity assessment of City Clerk and Recorder systems
• Perform penetration testing of operational systems
• Assess Active Directory configurations across multiple city agencies
• Design and execute audit testing procedures
• Produce confidential workpapers detailing findings and recommendations
• Develop public-facing informational reports
• Present findings to the City's Audit Committee
• Conduct follow-up assessments on implemented recommendations
• Participate in weekly meetings with Auditor's Office representatives
• Coordinate with City agencies during information gathering