Cybersecurity Assessment, Compliance and Governance Services

The City of Norcross, Georgia is seeking cybersecurity assessment, compliance, and governance services to strengthen its overall security posture. The agency needs to evaluate its current security policies, procedures, and controls across all departments to identify existing vulnerabilities. To solve these security challenges, the agency requires a comprehensive cybersecurity plan and a resiliency roadmap that prioritizes municipal objectives and enhances visibility and management. The scope of work covers conducting a cybersecurity risk assessment and providing clear guidance regarding cloud-based platforms in conjunction with necessary security frameworks. The selected partner must develop policies and frameworks addressing access control, identity management, data protection, secure cryptographic storage, incident response, disaster recovery, and third-party risk management. Additionally, the project requires delivering targeted awareness training for general end-users, advanced operational training for IT staff, and a train-the-trainer model to establish internal educational capabilities. Eligibility is restricted to onshore organizations based in the United States. The agency allows the performance of the work to be conducted offsite. Bidders can submit their proposals digitally via email or through an online portal. The agency is looking for proposals to determine the budget for this initiative. Bidders must submit any questions regarding the solicitation no later than June 29, 2026. The agency will host an optional pre-proposal meeting on June 26, 2026.