Security Assessment and Risk Analysis Service

The government authority located in Colton, California is seeking a vendor to provide a comprehensive information security and cybersecurity security assessment, alongside a HIPAA risk analysis and gap analysis. This initiative aims to identify vulnerabilities and ensure compliance through a scan of every county internet protocol address. The selected vendor will perform HIPAA Risk Analysis Services and Activities, a HIPAA Security Rule Gap Analysis, and countywide security assessment and risk analysis services. The scope of work requires external network penetration testing to evaluate web applications, firewalls, remote access systems such as VPN and RDP, internet-accessible servers, and internet postings. The testing must include active measures to evade the authority's detection and response efforts. Additionally, the agency requires a physical assessment to review security controls for information assets that handle electronic data, validating current procedures to safeguard sensitive areas and equipment from unauthorized access, tampering, theft, and physical elements. Eligible bidders must be onshore organizations based in the United States. The agency requires all work to be performed offsite. The total budget allocated for this initiative is up to 1,066,750 USD, and the resulting contract will span a period of five years. The agency has scheduled a mandatory pre-bid meeting for July 16, 2026. Bidders must submit all questions regarding this opportunity no later than July 23, 2026. The source document does not specify further evaluation criteria.