ITES-11317 - USA (Concord, California) - Cybersecurity Governance and Risk Management Services - Deadline December 3,2026

(1) Vendor needs to provide cybersecurity governance and risk management services to the government authority located in Concord, CA.– The plan should define security events and incidents, severity levels, escalation paths, roles and backups, legal, regulatory, and member notification requirements, and coordination with outside parties such as legal counsel, cyber insurance carriers, and technology vendors.– Provide an after–action report with findings and recommended improvements, and a recommended approach for recurring exercises.– Plan and facilitate a tabletop exercise to test the Incident Response Plan using scenarios relevant to a public pension system.– Develop a risk–based third–party risk management program, including a vendor inventory and risk tiering approach, minimum due diligence requirements by tier, standard cybersecurity contract language scaled to vendor risk, and procedures for ongoing monitoring and periodic reassessment.(2) All the questions must be submitted no later than November 5, 2026.