Cyber Security Risk Assessment

Background
The City of Detroit Office of Contracting and Procurement (OCP), on behalf of the Department of Innovation and Technology, is seeking proposals for a comprehensive Enterprise Cybersecurity Risk Assessment. This initiative aims to identify vulnerabilities, assess risks, and recommend mitigation strategies to enhance the City’s cybersecurity posture.

As the largest city in Michigan, Detroit is committed to protecting its systems, data, and technological assets amidst a growing need for robust cybersecurity measures.

Work Details
The selected vendor will be responsible for conducting a thorough assessment of current cybersecurity policies, procedures, and controls. Specific tasks include:
- Identifying and evaluating potential threats and vulnerabilities;
- Assessing the effectiveness of existing security measures;
- Providing a detailed report with findings and recommendations for improvement;
- Developing a risk management plan tailored to the organization.

Deliverables expected from the vendor include:
- A comprehensive risk assessment report;
- A prioritized list of vulnerabilities and risks;
- Recommendations for mitigating identified risks;
- A roadmap for implementing recommended security measures.

Period of Performance
The contract will be for one (1) year from the date of award, with potential renewal options subject to approval by the Detroit City Council.

Place of Performance
The work will be performed within the City of Detroit.