ITES-10548 - USA (Columbus, Ohio) - External IT Security Assessment Service - Deadline July 15,2026

(1) Vendor needs to provide external IT security assessment service to the government authority located in Columbus, OH.  – An independent external assessment of information technology (IT) security program, including review of  IT security governance and structure and alignment to the NIST Cybersecurity Framework (CSF) 2.0.– IT security governance and program structure people, process, and technology and how it supports business objectives and regulatory and oversight expectations. – Evaluate agency cybersecurity capabilities against NIST CSF 2.0, including identification of gaps, strengths, and areas for improvement. – Validate agency current–state assessment (where available) and provide an independent view of risks, assumptions, and material exposures. – Program discovery and data collection – NIST CSF 2.0 assessment and mapping– Gap analysis, risk considerations, and recommendations – Security program maturity roadmap – Executive readout and leadership workshop(2) All the questions must be submitted no later than June 30,2026.