Security Consulting Services

The Pennsylvania county government is seeking a vendor to provide on-call cybersecurity and information security consulting services. The agency needs to improve its security posture, reduce cyber risk, support regulatory and policy compliance, and protect its information systems, data, and critical services. To achieve this, the agency requires a risk-based, standards-driven approach to identify and assess cybersecurity risks across all county systems and operations. The scope of work covers governance, risk, and compliance services, security assessments and testing, and incident response and readiness. The selected vendor will also provide identity, access, and data protection services, strategic security advisory services, and training and awareness programs. The agency expects actionable, prioritized recommendations to improve security controls, adopt zero trust practices, and increase the resilience of county systems, programs, and personnel. Eligible bidders must be onshore organizations based solely in the United States. The agency requires all performance of the work to occur offsite. Bidders must submit their proposals digitally via email or through the designated online portal. The agency has not disclosed a specific budget and is looking for cost proposals within the submissions.