OT Program Review and Consultation

The Port Authority of New York and New Jersey is seeking a subcontractor to evaluate existing operational technology cybersecurity programs against recognized industry standards. The scope includes assessing the current state of OT security controls, developing maturity models to quantify organizational readiness, and delivering actionable policy recommendations to address identified gaps. The contractor will be expected to provide detailed improvement roadmaps that outline phased, prioritized steps for enhancing cybersecurity posture across critical OT environments. The work requires deep expertise in OT systems, cybersecurity frameworks, and risk management practices relevant to infrastructure operations. Proposals must be submitted by August 4, 2026, and the contract falls under NAICS code 541611 for management consulting services. The performance location is in New York, and the opportunity is open under a subcontract structure without specific set-aside designations. Potential offerors should be prepared to demonstrate technical capability in evaluating complex industrial systems and translating findings into implementable security strategies aligned with evolving regulatory and operational demands.