Golden State Water Company

Buyer is soliciting proposals from qualified cybersecurity firms to assess the cybersecurity of their Supervisory Control and Data Acquisition (SCADA) system. The assessment requires in-depth knowledge and experience with similar technical services. Buyer expects excellent performance, full cooperation, responsiveness, and timely delivery of all tasks. The project will begin in July 2025 with the best available schedule.

• 5/28/2025 - Bid Posting Date
• 6/23/2025 - Q&A Deadline
• 6/27/2025 - Proposal Due Date
• 7/1/2025 - Project Start

• California P.E. registered
• Successfully completed prequalification application process
• Completed at least three similar projects in past three years

• Assess cybersecurity of GSWC SCADA system
• Conduct vulnerability assessment of control systems
• Evaluate SCADA network architecture security
• Identify cybersecurity gaps and weaknesses
• Develop remediation recommendations
• Analyze operational technology security controls
• Assess SCADA system access controls
• Evaluate incident response capabilities
• Review security policies and procedures
• Assess regulatory compliance status
• Analyze data protection measures
• Conduct penetration testing if appropriate
• Evaluate security monitoring capabilities
• Assess business continuity planning
• Document findings in comprehensive report
• Develop implementation roadmap for improvements
• Prioritize security recommendations
• Present findings to executive management
• Assess third-party vendor security
• Evaluate security awareness training program