Cybersecurity Risk & Threat Assessment Services

The contract seeks specialized services to conduct comprehensive cybersecurity risk and threat assessments aligned with NIST SP 800-53 Rev. 5 and ISO/IEC 27001 standards, aimed at evaluating the security posture and effectiveness of existing cybersecurity programs. These assessments are designed to identify vulnerabilities, analyze potential threats, and measure the maturity of controls to ensure alignment with industry best practices and regulatory expectations. The work will support the Port Authority of NY & NJ’s New York office in strengthening its overall cyber resilience and compliance posture. This is a subcontract opportunity posted on July 14, 2026, with a response deadline of August 4, 2026, under NAICS code 541620 for Management, Scientific, and Technical Consulting Services. The place of performance and specific location details are not defined, and there is no set-aside designation indicated. Interested parties must submit their proposals through the provided portal before the deadline to be considered for award. The opportunity does not list a point of contact, so inquiries should be directed via the official platform listed.