Ohio Transit Risk Pool (OTRP) Member Cybersecurity Compliance Program

The Ohio Transit Risk Pool (OTRP) invites qualified firms ("Proposers") to submit proposals to design and deliver a practical, cost effective cybersecurity compliance program for participating OTRP member agencies (anywhere from 4-10 members) . The program will help members comply with new Ohio law to implement core cybersecurity policies, plans, and training. The successful proposer should possess sufficient knowledge in the area of public entities cyber secur i ty to develop a clear, logical work plan to complete all required s ervices described below, in a manner which appropriately meets the needs of a public entity. The selection process time frame for the contract is as follows: Date RFP Distribution October 10 , 20 2 5 Deadline for Questions October 31, 20 2 5 Proposal Submission Deadline November 7, 2025 Proposal Evaluation & Se lection Recommendation November 14, 2025 Work to B egin On or after December 1, 20 2 5 Final Product Completed On or before June 1, 2026 Objectives Enable participating member agencies to meet statutory Section (C) program requirements with auditable evidence (program document , policies, procedures, and training records). Stand up and adopt essential policies and plans across agencies (see below Scope of Work C ) using reusable templates and tailored content. Establish a consistent baseline assessment, prioritized remediation roadmap, and exercises that build operational capability across agencies.