City of Richland

Buyer seeks a consultant to provide Virtual Chief Information Security Officer (vCISO) services for a four-month term. The engagement involves executive-level cybersecurity consultation, cybersecurity policy development, and creating an IT governance model. The vCISO will assess the current security posture, identify gaps, and develop frameworks to enhance security resilience. The project is funded by a 2023 SLCGP grant program and aims to strengthen IT governance and incident response capabilities.

• 5/1/2025 - RFP Issued
• 5/21/2025 - Deadline for Questions
• 5/28/2025 - Proposal Due Date
• 6/30/2025 - Estimated Date of Council Award
• 7/31/2025 - Estimated Date of Notice to Proceed
• 11/30/2025 - Target Date for Completion

• Experience providing vCISO services to public sector organizations
• Team with security policy, incident response, and IT governance expertise
• Experience aligning cybersecurity programs with NIST and CIS Controls
• Team holding CISSP, CISM, CISA, CRISC certifications
• History of successful cybersecurity program development
• Strong ability to communicate complex security concepts

• Develop cybersecurity assessment report identifying gaps and risks
• Create IT security policies and procedures
• Develop disaster recovery and business continuity plan
• Conduct comprehensive security gaps analysis assessment
• Design security governance model defining roles and responsibilities
• Create incident response framework and plan
• Develop data protection and contingency data recovery plan
• Create vendor risk management and vetting plan
• Develop multi-year cybersecurity strategy and roadmap
• Provide executive cybersecurity consultation and training