RFP 3179 IT and Network Security Audit

Background
The Roanoke City Public Schools (RCPS), also referred to as the School Board of the City of Roanoke, Virginia, is seeking proposals for an IT and Network Security Audit.

The purpose of this Request for Proposal (RFP) is to procure cybersecurity equipment and services necessary to enhance the cybersecurity protection of RCPS's broadband Wide Area Network and Internet access services.

The Division intends to apply for funding through the federal Cybersecurity Pilot Program (CPP) offered by the Federal Communications Commission (FCC).

Work Details
The selected vendor will conduct a comprehensive IT security and network security audit, which includes the following tasks:
1. Identify existing security gaps and misconfigurations.
2. Evaluate the effectiveness of current security measures.
3. Identify additional action steps for remediation and improvement.

Specific services required include:
1. Identify IoT devices on the network (e.g., vape sensors, temperature monitors, building controls, cameras) and provide recommendations for securing these devices.
2. Inform RCPS of any issues with IoT assets affecting business-critical applications and service performance.
3. Assess VPN connection security with best practice recommendations.
4. Audit VCenter server environment, Meraki, VLANs, SAN, and firewall configurations with mapping and best practice recommendations.
5. Review information security policies and procedures.
6. Evaluate technical security controls and risk management practices.
7. Ensure incident readiness and compliance with industry standards.

Period of Performance
The contract will commence upon receipt of the Funding Commitment Decision Letter from the FCC and will last for three years from that date, with a potential one-year extension at RCPS's discretion.

Place of Performance
The contract work will be performed at locations associated with Roanoke City Public Schools in Roanoke, Virginia.