The City of Rockville is seeking a qualified firm to provide comprehensive IT security assessment services. This includes a third-party cybersecurity assessment to review the IT infrastructure, identify vulnerabilities, and develop a prioritized roadmap for mitigation and remediation. The assessment should utilize industry best practices, complement the NIST Cybersecurity Framework, and follow CIS Controls. Key areas of assessment include vulnerability assessment and penetration testing (VAPT) across various special purpose networks, risk assessment, and information security program evaluation. Deliverables include a detailed assessment report, project plan, executive summary, identification of security gaps, a security improvement roadmap, and process improvements. Bidders must provide evidence of at least three years of prior experience, resumes for key personnel, and be licensed and bonded in Maryland. The anticipated contract term is one year, with the option to renew for up to four additional one-year periods. Bids must be submitted electronically via the City's collaboration portal by April 23, 2026, at 2:00 PM ET. Questions are due by April 10, 2026.
The bid closing date is Thursday, April 23, 2026. Work is to be completed no later than June 30, 2026.
The bid notice states Payment terms: Net 30.
All components, workmanship, and installation shall be warranted to be free from defect or failure for a period of one (1) year from the date of acceptance by the owner. Contractor shall provide contact information for warranty service and shall provide warranty service response within 48 hours of a reported warrantable issue.
Award will be made to the lowest responsive and responsible bidder complying with all provisions of the invitation for bid, provided the price is reasonable and in the best interest of the city to accept.
Bidders must provide written evidence through references of three years prior experience with the scope of work as detailed in the specifications. Bidders and all individuals performing applicable work must be fully licensed and bonded to perform all related work in the state of Maryland. Resumes for all key personnel are required.
Samples of items, if requested, shall be furnished without charge, upon request within ten days. Failure on the part of the bidder to provide such samples within the specified time frame or to comply with these instructions may be cause to consider the bid as nonresponsive.
Questions pertaining to this bid may be directed to Gina Washington via the City's collaboration portal only at www. ***. *. * no later than Friday, April 10, 2026, by 4:00 PM EST.