The City of Lakeland is seeking a qualified consulting firm to perform a Cyber Vulnerability Assessment (CVA) of its electric utility’s Energy Management System (EMS). The assessment aims to ensure compliance with the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Standard CIP-010-4 R3. The scope of work includes planning activities, assessment activities, and deliverables such as a comprehensive assessment report, assessment findings, and gap analysis. The City is looking for a firm with relevant experience and qualifications in conducting cyber vulnerability assessments and NERC CIP compliance. • The assessment should be conducted in a non-intrusive manner and include activities such as active network discovery, vulnerability scanning, and identification of potential cybersecurity vulnerabilities. • The consultant should provide a detailed project plan, including a timeline with major milestones and deliverables. • The consultant should have experience with NERC CIP standards, cybersecurity, and other related fields. • The consultant should have a clear methodology for identifying and addressing potential vulnerabilities and compliance gaps. • The consultant should provide a firm total cost to accomplish all work described in the RFP, including an itemized cost breakdown.