The State of Maryland is seeking a contractor to provide cybersecurity assessment services to conduct approximately 90 cybersecurity assessments of units of State government over a 24-month period. The contractor will utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework to assess organizational maturity and provide recommendations for improvement. The contractor will also develop and maintain real-time reporting dashboards and integrate historical NIST CSF assessment data to illustrate year-over-year performance trends. • Key responsibilities include conducting cybersecurity maturity assessments, utilizing experienced personnel, and providing findings and recommendations to agency leadership. • The contractor will also develop an Evaluation Standards Guide to ensure consistent and objective scoring. • The contract will be for a base period of two years with one two-year option period. • The primary place of performance will be the contractor's location and possibly various locations throughout the State of Maryland. • A pre-proposal conference will be held on October 6, 2025, at 10:00 AM Local Time. • Questions are due by October 13, 2025, at 10:00 AM Local Time. • Proposals are due by November 5, 2025, at 2:00 PM Local Time.