Cybersecurity Penetration Test, Vulnerability Scan, and Risk Analysis Services

Kissimmee Utility Authority (KUA) is seeking qualified and experienced firms to provide comprehensive Cybersecurity Penetration Test, Vulnerability Scan, and Risk Analysis Services. The selected Contractor shall be responsible for evaluating KUA’s cybersecurity infrastructure, identifying potential vulnerabilities and security risks, and providing recommendations to strengthen KUA’s overall cybersecurity posture.
Services shall include, but are not limited to:
- Internal and external network penetration testing to identify security vulnerabilities and potential threats - Black Box and White Box testing to evaluate the effectiveness of existing security controls - Vulnerability scanning and assessments of public facing infrastructure, wired and wireless networks, and internal systems - Cybersecurity risk analysis to identify, assess, and prioritize potential security threats and weaknesses - Evaluation of existing cybersecurity policies, procedures, and security controls - Development of detailed findings, risk assessments, and recommendations for remediation - Preparation of comprehensive reports, including an Executive Summary, Technical Review, and Detailed Findings Report - Return visit or remote validation testing to verify remediation of identified vulnerabilities
The Contractor shall ensure minimal disruption to KUA’s operations, maintain the confidentiality and security of all information, and perform all services in accordance with approved testing procedures, industry best practices, and the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0. All testing shall be coordinated with KUA and conducted within authorized testing windows. Operational Technology (OT) and SCADA systems are excluded from the scope of services.