Small Enterprise Cybersecurity Upgrade and Resiliency Enhancement Program Service Providers

Background
The Ohio Department of Development is seeking proposals for the Small Enterprise Cybersecurity Upgrade and Resiliency Enhancement Program. This initiative aims to enhance the cybersecurity practices of small businesses in Ohio, which is a key component of the state's economic development strategy.

The program follows a successful pilot launched in 2022 that assisted over seventy small businesses in improving their cybersecurity measures, particularly in preparation for U.S. Department of Defense requirements for defense contractors. The Agency aims to baseline Ohio small businesses' cybersecurity levels against updated standards and provide ongoing support.

Work Details
The Contractor will provide the following services:

1. **Cybersecurity Assessments**: Conduct assessments of cybersecurity practices for Ohio companies based on NIST SP 800-171 or equivalent standards, including direct communication with companies, reviewing existing practices, identifying deficiencies, and scoring practices.

2. **Cybersecurity Documentation**: Prepare necessary documentation such as System Security Plans (SSP), Incident Response Plans (IRP), and/or Plan of Action & Milestones (POAM) based on assessment results.

3. **General Inquiries and Assistance**: Respond to inquiries related to cybersecurity, provide referrals for professional services, and inform the Agency about cybersecurity opportunities.

4. **Quarterly/Annual Reports**: Submit detailed reports on assistance provided to companies, including Self-Assessment scores and monthly invoices detailing service hours.

5. **Closeout Meetings**: Facilitate meetings at the conclusion of assistance to recap support provided and discuss recommendations for continued improvement.

Period of Performance
The contract will commence upon award and will run through June 30, 2025, with potential one-month renewals subject to mutual agreement and funding availability from the Ohio General Assembly.

Place of Performance
The services will be provided throughout the entire state of Ohio.