Cybersecurity Framework 2.0 Adoption and Maturity Advancement Services

The government authority in Greer, South Carolina needs cybersecurity firms to guide the Airport's structured adoption of the Cybersecurity Framework (CSF) 2.0 and advance its risk-management practices. The contractor must reconcile and validate the Airport's current-state scoring across Purview Compliance Manager and Arctic Wolf into a single authoritative CSF 2.0 Current Organizational Profile. The requested scope includes delivering a prioritized gap analysis, a multi-year roadmap with phased milestones and cost estimates, priority policy or standard authoring, control implementation support for high-priority gaps, a KRI or metrics dashboard integrated with Microsoft tooling, and staff enablement. The vendor must fully execute Phase 1 within the current 10-month budget period. Eligibility requires an onshore USA organization. The contractor will perform all work offsite. Bidders must submit proposals to address the budget requirement, and the buyer requires all questions by October 05, 2026.