SP 91503: Cybersecurity Assessment and Pen Testing

Chicago Housing Authority (CHA) seeks a qualified vendor to perform a comprehensive cybersecurity assessment and penetration testing of its internal and external systems, including web applications, cloud environments, wireless networks, and social‑engineering simulations. The work must be completed within a tight base‑year window, with deliverables that include detailed technical findings, remediation recommendations, machine‑readable data, and a post‑assessment presentation. The contract includes a one‑year base term with two optional extensions, and strict insurance and compliance requirements must be met. • Conduct external and internal vulnerability scans, penetration testing, and cloud security reviews. • Perform wireless security testing and advanced phishing/social‑engineering exercises (up to 1,500 employees). • Deliver executive summary, technical findings with CVSS/CVE references, remediation roadmap, and retesting of high/critical findings within 90 days. • Meet mandatory insurance coverage ($1 M CG/Liability, $1 M Professional Liability, etc.) and submit required post‑award forms within 5 business days. • All work must be performed by U.S.–based staff, with data residency in the United States, and adhere to NIST, OWASP, MITRE ATT&CK, and CIS standards.