Information Security Assessment and Testing Services
- Client
- Philadelphia, Pennsylvania
- RFP Number
- ITES-11172
- Posted
- 10/16/2026
- Category
- IT Services (Computer Maintenance and Technical Services)
- Budget
- Looking for Proposal
- NAICS
- —
- Set-aside
- —
- Contact
- —
Description
AI GeneratedThe government authority in Philadelphia, PA requires information security assessment and penetration testing services for its external gateway, internal network systems, mobile wireless access controls, and OT environment. The contractor must identify and exploit security vulnerabilities across servers, databases, web applications, physical access, user behaviors, and OT architecture to demonstrate potential risk levels. Only USA-based (onshore) vendors are eligible to submit proposals for this offsite work. Applicants must submit questions by October 22, 2026, and may submit their final responses digitally through email or online. The agency is requesting budget proposals for a one-year contract term.
Key solicitation details
AI-extracted from 2.pdf. Confirm against the original documents before bidding.
Philadelphia Gas Works is requesting sealed proposals for information security assessment and testing services, including vulnerability assessment and penetration testing for its external gateway, internal network systems, mobile wireless access controls, and OT environment. Eligible proposers must perform work onshore (USA only) with experience in the utility/energy industry.
- Issued by
- Philadelphia Gas Works
- Issue Date of the RFP
- October 15, 2026
- Questions and requests for clarification due
- October 22, 2026, 2:00 p.m.
- Procureware registration deadline
- Not later than 3 business days before Proposal Submission Due Date
- Proposal Submission Due Date
- November 3, 2026, 2:00 p.m.
- Contract Start Date
- As soon as possible after proposer selection and contract negotiation
- How to submit
- Electronic via pgw.procureware.com
- Submission details
- Submitted as a searchable PDF readable by Adobe Reader 7.0 or higher via pgw.procureware.com. Must be prepared in English with tabbed indexes.
- Contract term
- One year
- Place of performance
- Offsite
- Insurance and bonding
- Workers Compensation statutory limits and Employers Liability; Commercial General Liability ($1M each occurrence, $2M general aggregate, $2M products/completed ops, $1M personal/adv injury); Business Auto Liability ($1M combined single limit); Excess/Umbrella Liability ($2M per claim/occurrence); Professional Liability Errors & Omissions and Cyber Liability; Fidelity/Blanket Crime Insurance ($2M Employee Dishonesty limit).
How proposals are evaluated
| Superior ability or capacity to meet particular requirements set forth in this RFP | |
| Superior prior experience of Proposer and staff | |
| Lower cost | |
| Anticipated long-term cost effectiveness | |
| Meets prequalification requirements |
Scope of work
- Identify security vulnerabilities in servers, databases, desktops, and network devices from external and malicious insider perspectives
- Exploit vulnerabilities to gain access and attain Root or Domain Administrator access privileges
- Demonstrate elevated privileges attainment and ability to export potentially sensitive data
- Identify security vulnerabilities in agency web applications
- Identify physical security vulnerabilities using social engineering techniques
- Identify and exploit user behavior vulnerabilities through simulated social engineering attacks
- Identify security vulnerabilities in OT environment through OT architecture review and vulnerability assessment
- Provide written findings report and executive report for management team
Minimum qualifications
- Information security assessment as one of the company's core services and products
- Experience and knowledge with utility/energy industry required
- No subcontractors allowed in this engagement
- Valid commercial activity license issued by the City of Philadelphia Department of Licenses and Inspections
- Onshore (USA Only)
Documents to include with the bid
- Transmittal letter (Tab 1)
- Proposed scope of work, work plan, procedure and timeline (Tab 2)
- Proposal Pricing listing IT and OT services separately (Tab 3)
- Completed Section 4 Proposer Information signed (Tab 4)
- Resumes and reference lists for participating personnel (Tab 5)
- Completed Attachment B Proposer Questionnaire (Tab 6)
- Completed Attachment D Required 17-1400 Disclosure (Tab 7)
- Attachment I Demographic Survey (Optional)
- Banking documentation and completed W-9 form for electronic payment
Verify important details
Document checkConfirm submission instructions and amendments with the issuing agency before responding.
Personalized fit score
Sign up free to see how well this opportunity fits your company — based on your saved profile.
Sign up to see your fit score