The City of Tulare is seeking Statement Of Qualifications (SOQ) from qualified consultants interested in providing the City with On-Call as needed Cybersecurity Consulting Services. The Initial Term of the contract is one year, with 2 additional one-year options available at the sole discretion of the City.
The City of Tulare is seeking a knowledgeable, experienced Cybersecurity consulting firm to assist the City in continuing to grow a real world, right-sized cybersecurity program for the City of Tulare.
The City of Tulare desires to work with cybersecurity consulting firm with experience working with mid-sized full-service local governments. Municipal governments utilize a wide variety of complex technologies to support each functional area of the city.
Consultants should have not only considerable experience in Cybersecurity, but also industry specific knowledge required for municipal governments such as CIJIS for supporting law enforcement, PCI for supporting financial transactions, HIPPA for patient care records, as well as understand of regulations and operational requirements related to Industrial Controls Systems (ICS).
The expectation is for the successful consultant to review existing cybersecurity environment and work with city staff to create a plan to continue to grow a real world, right-sized cybersecurity program for the City of Tulare. It is expected, included in this plan will be audits and testing, and well as continued refinement of related, policies, procedures and documentation.
Minimum Qualifications
- Five years of experience in Cybersecurity Consulting.
- Demonstrated experience providing right-sized Cybersecurity Consulting.
- Experience working with similar sized municipal governments, or other government agencies is highly desirable.
Some activities the firm should be able to perform:
- External penetration testing
- Internal penetration testing
- Wi-Fi penetration testing
- Phish Testing
- Physical penetration Testing
- Disaster Recovery Plan Review
- Business Continuity Planning Review
- Varied Policy Reviews
- Facilitation of Table Top Exercises at all levels of the organization.
The above list is not intended to be exhaustive; other services may be requested as the need arises. The selected firm may employ the services of sub-consultants and contractors as it may deem appropriate for the performance of the project, provided that all sub-consultants and contractors are clearly identified in the Statement of Qualification (SOQ) and approved by the City or are identified with a specific task order and are approved by the City. At a minimum, Consultant Firms and Consultant Teams wishing to be considered shall provide all services noted in the RFQ. As part of the SOQ, Firms and Teams are encouraged to identify additional Cybersecurity related consulting services they believe will be of benefit to the City. No more than 20% of the overall work is to be completed by a subconsultant as a result of this RFQ process.
Statement of Qualifications (SOQs) shall be submitted by firms or joint ventures (Teams) that meet the qualifications listed, and have a capable and demonstrable background in the type of work described. In addition, all interested Consultants shall demonstrate that they have sufficient, readily available resources in the form of trained professional personnel, trained technical staff, support services, specialized sub-consultants and financial resources to carry out the work without delay or shortcomings.
Due to the as-needed nature of the work, no work (task orders) is guaranteed once a Professional Services Agreement is fully executed. The scope of work will vary and will be requested by the City of the Consultant on a task order basis as the need arises.
Funding for these projects will vary, and may include City General Funds, Enterprise Funds or other grant-based funding. This Request for Qualifications is being issued by the City of Tulare Information Technology. Unless otherwise directed, all communications regarding this Request for Qualifications should be directed to Information Technology.
