Cybersecurity Services RFP

The City of Big Rapids, Michigan is seeking a qualified consultant to perform an independent cybersecurity assessment and to establish a continuously improving cybersecurity program for the municipality. The work includes on‑site assessment using CIS Controls and the CSAT tool, delivery of a detailed assessment report, recommendations, a baseline incident‑response plan, and twelve monthly advisory sessions. Mandatory services required under the Michigan State‑and‑Local Cybersecurity Grant Program include continuous web‑application and external vulnerability scanning, plus an annual Nationwide Cybersecurity Review. Preference will be given to Michigan‑based firms with local‑government experience, and subcontracting is prohibited without written approval. The contract is a one‑year term, renewable at the City’s discretion, with a proposal deadline of 10:00 AM, May 4 2026. • Perform on‑site cybersecurity assessment using CIS Controls and CSAT tool. • Deliver assessment report, improvement plan, baseline incident‑response plan, and 12 monthly advisory sessions. • Provide mandatory CISA services: continuous web‑app scanning, external vulnerability scanning, and annual NCSR. • Must be a Michigan‑based firm; subcontracting requires City approval; contract term is one year with possible renewal.