Governor's Office of Information Technology

Buyer seeks qualified vendors to provide technical assistance for developing Cybersecurity Plans and Supply Chain Risk Management (SCRM) Plans for broadband grant subgrantees. The work supports compliance with NTIA's BEAD Notice of Funding Opportunity cybersecurity requirements for organizations deploying or upgrading broadband networks. Buyer will establish a prequalified vendor list through Main Task Order Contracts with an initial term of one year plus four optional one-year renewals.

• 6/3/2025 - Written Inquiry Deadline
• 6/6/2025 - State Response to Written Inquiries
• 6/16/2025 - Proposal Due Date

• At least 3 years experience developing Cybersecurity Plans and Supply Chain Risk Management Plans

• Conduct initial interviews and needs assessments with subgrantees
• Perform cybersecurity risk assessments for grant-funded projects
• Complete supply chain risk management assessments
• Develop compliant cybersecurity plans based on NIST frameworks
• Create SCRM plans following NISTIR 8276 and NIST 800-161
• Review and update existing cybersecurity and SCRM plans
• Provide plan closeout with disposition instructions
• Deliver virtual presentations on cybersecurity planning
• Document IT/OT technology asset inventories
• Prioritize cybersecurity gaps with implementation timelines