Cybersecurity Risk Assessment — Water and Wastewater Systems

The City of Ogdensburg is soliciting proposals for a comprehensive cybersecurity risk assessment of its municipally owned drinking water and wastewater systems. This project, identified as RFP No. 2026-SECURE-01, is funded by the New York State Environmental Facilities Corporation SECURE Program Assessment Grant. The selected consultant will be required to evaluate the systems using the NIST CSF 2.0 framework and CIA Triad principles to ensure compliance with New York State Department of Health and Department of Environmental Conservation regulations effective March 1, 2026. Key deliverables include draft and final risk assessment reports, regulatory gap analyses, prioritized remediation roadmaps, and non-sensitive executive summaries for grant submission. The contract has a strict not-to-exceed budget of 45,000 dollars, and any proposal exceeding this amount will be deemed non-responsive. Performance is expected to begin with contract execution in February 2027, with a draft report due within 120 calendar days of the notice to proceed. Award decisions will be based on a weighted evaluation of technical approach, firm qualifications, cost, personnel expertise, and the proposed schedule. Qualified firms must demonstrate experience with at least three similar engagements within the last five years and provide personnel with relevant certifications such as CISSP, CISM, GICSP, or CEH. Proposals must be submitted in a sealed package by November 20, 2026, including a signed cover letter, firm qualifications, a technical work plan, and required non-collusion and eligibility certifications.