Cybersecurity Risk & Compliance Assessment

The City of Norcross is seeking a subcontractor to perform a comprehensive cybersecurity risk and compliance assessment aligned with industry-standard frameworks including NIST Cybersecurity Framework, HIPAA, CJIS, and ISO 27001. The assessment will leverage existing data, policy reviews, and current controls to identify vulnerabilities, compliance gaps, and areas for improvement in the city’s cybersecurity posture. The evaluation must provide actionable insights and recommendations to strengthen defense mechanisms and ensure adherence to regulatory requirements governing data protection and information security. The contract opportunity is posted as a subcontract under NAICS code 541611 and is open for response until July 7, 2026. The work will be performed in coordination with the City of Norcross, Georgia, though specific performance location details are not provided. Proposals must be submitted by the stated deadline, and the sourcing process is managed through the Georgia Department of Administrative Services procurement portal. No set-aside provisions or special classification details are specified, indicating this opportunity is open to all eligible subcontractors capable of delivering the required analytical and compliance expertise.