2025 Cyber Vulnerability Assessment of Lakeland Electric’s Energy Management System

The City of Lakeland is requesting proposals from qualified consulting firms ("Consultant") to perform a Cyber Vulnerability Assessment (CVA) of its electric utility’s (“Lakeland Electric”) Energy Management System (EMS). The assessment aims to ensure compliance with the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standard CIP-010-4 R3. This standard requires evaluating the effectiveness of existing security controls, identifying exploitable vulnerabilities, and assessing risk to the reliability of the Bulk Electric System (BES). The CVA deliverables should include the identification of vulnerabilities, an assessment of the effectiveness of existing security controls, recommendations for mitigation strategies and suggested improvements to align with NERC CIP requirements while strengthening Lakeland Electric’s security posture.