About this opportunity
AI summaryThe Supreme Court of Ohio Office of Information Technology seeks competitive proposals from qualified contractors to assess and audit the strengths and weaknesses of its cybersecurity processes, documentation, governance, and protocols. The contractor will work with administrative leadership and the Office of Legal Counsel to evaluate policies, review vendor contracts, perform a gap analysis, and recommend next steps without conducting penetration testing. Eligible offerors must be onshore United States organizations with at least five years of experience, including public sector engagements, and have no unresolved findings for recovery from the Auditor of State. Proposals must be formatted as a single PDF containing an executive summary, transmittal letter, qualifications with five reference projects, proposed approach, and key personnel details. Vendors must submit questions by November 4, 2026, and deliver completed proposals by November 20, 2026, at 12:00 p.m. EST.
Buyer and opportunity details
- Client
- The Supreme Court of Ohio
Scope of work
- Schedule and conduct project kickoff, regular status meetings, and provide scheduled status reports
- Create and maintain project timeline and task list
- Conduct comprehensive analysis of cybersecurity governance, policies, risk management, training, disaster recovery, incident response, and contracts
- Review and assess risk and vulnerabilities in contracts with IT vendors, insurance carriers, and other agreements
- Perform gap analysis identifying weak or missing strategies, structures, policies, procedures, and technological capabilities using NIST CSF 2.0
- Provide written recommendations for governance roadmap, policy and procedure development, and staff training
- Deliver a comprehensive final written report covering methodologies, key findings, and recommendations
- Conduct a virtual or in-person presentation of findings and recommendations
How proposals are evaluated
| Criterion | Weight / scoring |
|---|---|
| Experience and Qualifications | Not specified |
| Quality of Evaluation Approach | Not specified |
| Budget and Cost Effectiveness | Not specified |
| Key Personnel and Capacity | Not specified |
Minimum qualifications
- No unresolved finding for recovery issued by the Auditor of State under R.C. 9.24
- Minimum of five years of experience completing the services identified in the RFP
- Documented experience completing cybersecurity assessment and governance consulting services for public sector entities
- Minimum of five projects/references of similar scope completed in the last five years (excluding The Supreme Court of Ohio and current staff)
- Assigned dedicated Project Manager
Documents to include with your response
- Single PDF proposal response
- Executive Summary
- Appendix A / Letter of Transmittal
- Respondent Experience and Qualifications summary with five references
- Evaluation Approach and proposed deliverables
- Key Personnel definitions, roles, experience descriptions, and resumes or CVs
- Appendix B / Cost Proposal Form
- Appendix E / Vendor Redaction Justification Log (if applicable)
- Ohio Public Employees Retirement System form PEDACKN (prior to payment)
Key dates
- RFP Issuance
- October 27, 2026
- Deadline for Submitting Questions
- November 4, 2026 at 12:00 p.m. EST
- Final Addendum to be Issued (if applicable)
- November 9, 2026
- Proposal Responses Due
- November 20, 2026 at 12:00 p.m. EST
- Virtual Presentations (if requested)
- December 7-11, 2026
- Evaluation Complete (Estimated)
- December 14, 2026
- Award Bid / Executed Contract (Estimated)
- December 21, 2026
- All Project Components and Deliverables Completed
- June 30, 2027
How to submit
- Method
- Instructions
- Sent directly to Brent Flanik, Procurement Administrator, formatted and submitted in a single PDF format; if redactions are requested, submit clearly identified ORIGINAL COPY or REDACTED COPY with Appendix E
Contract details
- Term
- Estimated award December 21, 2026 through June 30, 2027
- Insurance and bonding
- Commercial General Liability (ISO CG 00 01 occurrence basis with Court as additional insured), Automobile Liability (ISO CA 00 01 Code 1 any auto), Workers' Compensation as required by the State of Ohio, and Professional Liability insurance appropriate to profession with extended reporting coverage if claims-made.