NERC-CIP Cyber Security Consultant

Background
The Lansing Board of Water & Light (BWL) is the largest municipally-owned electric utility in Michigan, serving approximately 100,000 customers. Founded in 1885, BWL operates an electric system and provides water services to a significant number of residential and commercial clients. The agency is seeking proposals for a NERC-CIP Cyber Security Consultant to assist with compliance related to the North American Electric Reliability Corporation Critical Infrastructure Protection (NERC-CIP) Standards, specifically versions 5 and 6.

Work Details
The selected vendor will provide on-demand consulting and support services to maintain and enhance NERC-CIP compliance within Operational Technology (OT) environments. Key responsibilities include:
- Conducting assessments and providing recommendations on network security, change control, and procedural controls.
- Offering guidance to align with evolving NERC-CIP standards.
- Providing availability during regular business hours with 24/7 emergency support.
- Documenting expertise in Physical Security requirements as per NERC-CIP standards.

Deliverables will be structured under a Time and Materials agreement, requiring itemized invoices detailing billable hours and tasks performed. Additional tasks may include drafting white papers, developing compliance documentation, and delivering presentations to staff.

Period of Performance
The contract period will commence upon award and continue as required for the duration of the engagement under the Time and Materials arrangement.

Place of Performance
Services will primarily be performed remotely; however, on-site presence may be required at BWL's facilities located in Lansing, Michigan for specific engagements.

Bidder Requirements
Vendors must demonstrate expertise in NERC-CIP compliance, particularly within the Reliability First region or similar organizations. Preferred qualifications include direct involvement in NERC-CIP audits with references from utility companies. Vendors must also provide verification of a Personnel Risk Assessment as per NERC-CIP Standard 004-6 before accessing BWL resources.