SLCGP RFI for Procurement of Services Empowering Cybersecurity Solutions

Background
The Vermont Office of Purchasing and Contracting, on behalf of the Agency of Digital Services, has issued a Request for Information (RFI) to gather insights and cost estimates from qualified vendors. This initiative is part of the State and Local Cybersecurity Grant Program (SLCGP), aimed at enhancing cybersecurity measures across eligible Vermont agencies, towns, cities, and municipalities.

The RFI seeks to address the evolving cyber threats that local and state governments face, ensuring the protection of sensitive data and operational resilience. The goal is to identify vendors capable of delivering three key cybersecurity solutions while aligning with FEMA and CISA federal guidelines.

Work Details
The RFI outlines three primary service offerings that vendors are expected to provide:
1) Delivery of Security+ training and certification preparation;
2) Technical and administrative support for migrating eligible government entities to a .gov domain;
3) Implementation or enhancement of multi-factor authentication (MFA) systems across workforce and administrative access points.

Vendors are encouraged to propose scalable solutions tailored to public sector needs, including details on instructional methods, technical implementation strategies, compliance support, and ongoing maintenance or user support. Additionally, respondents should provide indicative pricing ranges for services and highlight any value-added offerings such as grant navigation assistance or workforce development support.

Period of Performance
The RFI was issued on August 18, 2025, with responses due by September 2, 2025. The specific period of performance for any resulting contracts will be determined based on future procurement activities following this RFI.

Place of Performance
The services will be performed within the State of Vermont across various eligible agencies, towns, cities, and municipalities.

Bidder Requirements
Vendors must demonstrate their eligibility to contract with state or local governments and provide documentation for relevant cybersecurity certifications held by their organization or key personnel. They should also include references from public sector clients where similar services have been delivered in the past three years.