ITES-10536 - USA (Norfolk, Virginia) - Cybersecurity Risk Assessment Service for Supervisory Control and Data Acquisition System - Deadline July 10,2026

(1) Vendor needs to provide cybersecurity risk assessment for supervisory control and data acquisition system to the government authority located in Norfolk, VA.– Light rail, which relies on a custom–built, integrated supervisory control and data acquisition system for its 24/7 operational control to ensure safe, reliable, and efficient transit operations across the region.– Interconnectivity includes power distribution, signal operations, track/rail yard management, train identification, and location.– Given the critical nature of these operations, a robust cybersecurity monitoring solution specifically designed for the environment is an operational imperative for critical infrastructure.– cybersecurity posture of its environment to ensure that the data collected from machines, sensors, and other field devices throughout the transit system have continuous availability, are free from data breach, and is accurate, consistent, and complete.– cybersecurity monitoring tool and document the current state and proposed changes, encompassing the following key areas:– Critical infrastructure security.– Data security.– Internet of things (IoT) security.– Network security.– Output of the assessment of the above listed key areas shall provide an assessment for the cybersecurity protection domains, including connections and communication channels; monitoring traffic, firewalls, and network segmentation; protecting devices (laptops, phones, servers) that connect to the network; antivirus/anti–malware, firewalls, security information, and event management (SIEM), and endpoint detection and response (EDR).(2) All the questions must be submitted no later than June 29, 2026.