2024-05 ITN Independent IT Audit

The City of Doral is seeking an independent firm to perform a comprehensive IT security audit, including digital forensics, penetration testing, and access‑control review of its network file‑share environment. The work will focus on 30 top‑level folders dating back to 2018, assess permissions, audit logs, and provide a forensic timeline, plus broader penetration testing of Wi‑Fi, internal, and perimeter networks. The contract will be negotiated with the highest‑ranked proposer after a scoring phase, and the firm must hold the required insurance and comply with NIST and FDLE CJIS standards. • Perform an independent audit of IT security policies, change‑management processes, and access‑control mechanisms. • Conduct digital‑forensic analysis of ~30 elected‑official folders (permissions, log review, timeline creation). • Execute internal and external penetration testing of Wi‑Fi, internal, and perimeter networks, and deliver a comprehensive report with remediation recommendations. • Must be a U.S.‑based firm, no subcontracting allowed, and must provide required insurance (CGL, Professional Liability, Cyber Liability, etc.).