E-470 Public Highway Authority

The buyer seeks a Virtual Chief Information Security Officer (vCISO) to provide strategic cybersecurity leadership and guidance. The vCISO will develop a comprehensive security strategy, conduct risk assessments, establish policies, ensure compliance, and oversee incident response planning. The contract term is for three years with a possible three-year extension. The buyer requires executive-level reporting on security posture and risks.

• 1/10/2025 - Cutoff date for receipt of questions
• 1/17/2025 - Date for final addendum
• 1/24/2025 - Proposal Due Date
• 3/13/2025 - Anticipated Contract approval
• 5/1/2025 - Anticipated notice to proceed
• 4/30/2028 - Contract Completion Date (if not extended)

• Develop and implement a comprehensive cybersecurity strategy
• Conduct risk assessments and monitor cybersecurity threats
• Establish security policies and ensure compliance with regulations
• Develop and oversee incident response and recovery plans
• Provide executive reporting on security posture and risks