Cybersecurity Risk Assessment Services

The City of Ogdensburg, New York, requires a qualified onshore firm to provide a comprehensive cybersecurity risk assessment for its municipally owned drinking water and wastewater systems. The scope includes gathering IT and OT/ICS architecture data, identifying vulnerabilities across governance and technical controls, and developing a prioritized remediation roadmap with cost estimates to support future grant applications. The selected contractor must submit a draft report within 120 calendar days of the notice to proceed, and all performance of work will occur offsite at the vendor's premises. Only USA-based organizations eligible to contract under New York State law may apply. Bidders must submit one original, three paper copies, and one electronic copy on a USB drive or via secured electronic transmission to the Office of the City Manager by November 20, 2026, at 4:00 PM Eastern time. Written questions are due by October 22, 2026, at 4:00 PM Eastern time. Evaluation criteria include firm qualifications and experience (25%), technical approach (30%), cost proposal (20%), key personnel qualifications (15%), and MWBE/SDVOB/local vendor considerations (10%). The fixed, all-inclusive budget is capped at $45,000.00, and any proposal exceeding this amount will be deemed non-responsive.