Atlanta Regional Commission

Buyer seeks a qualified service provider to perform a Network Security Audit and Vulnerability Assessment. The assessment will evaluate edge security, network security, systems security, access management, and disaster recovery capabilities. Deliverables include findings document, risk analysis, security roadmap for 24-36 months, and conducting disaster recovery drills and tabletop exercises.

• 4/23/2025 - RFP release date
• 5/5/2025 - Deadline for questions
• 5/12/2025 - Response to questions
• 5/23/2025 - Proposal Due Date

• Must have CISA certified security experts or equivalent
• Must provide three former customers as references
• Must submit sample assessment reports

• Perform external IP ping sweep and port scan
• Review ingress/egress firewall policies
• Analyze network segmentation and internal firewalls
• Review wireless security settings and port security
• Conduct internal IP address vulnerability scanning
• Review patch management solutions
• Perform password auditing for domain users
• Prepare tabletop exercise briefing books
• Conduct two full disaster recovery drills
• Deliver presentations to executive team on findings