RFP 019-0-2026/HM - Cybersecurity Penetration & Vulnerability Testing Services

Background
Newport News Public Schools (NNPS) is the ninth largest school division in Virginia, serving approximately 26,500 students across various educational facilities. The agency aims to enhance the security of its information systems through a comprehensive cybersecurity penetration testing and operational framework review assessment. The goal is to make these systems more resilient against attacks and limit potential damage from such incidents. NNPS seeks qualified firms with expertise in NIST assessment methodology and a proven track record in providing high-quality cybersecurity services within the PreK-12 education sector.

Work Details
The selected contractor will perform an audit of identified data systems and networks using a vendor-neutral framework (NIST 800-53). They will conduct penetration testing and provide a report with recommended remediation options. Specific tasks include:
- Conducting external and internal vulnerability scans
- Web application security assessments
- Wireless penetration testing
- Firewall evaluations
- Reviews of information security policies and data governance.

The contractor will also provide optional services such as cloud assessments, compromise assessments, and physical penetration testing. All deliverables must be submitted within four weeks after testing completion.

Period of Performance
The contract will be performed annually with specific deliverables due within four weeks after the completion of vulnerability assessments and penetration testing.

Place of Performance
Services will be conducted both on-site at various NNPS locations and remotely as required.

Bidder Requirements
Offerors must have experience with NIST assessment methodology, cybersecurity in educational settings, and must be authorized to transact business in Virginia. They are required to submit a completed anti-collusion/nondiscrimination clause form along with their proposal. Additionally, offerors must provide proof of registration to do business in Virginia.