IT Security Assessment

Dakota County is seeking a qualified vendor to perform a comprehensive internal and external network penetration test of its IT infrastructure, including a light‑touch OWASP review of its public website. The contractor must deliver a detailed technical report, an executive summary, and a remediation roadmap, all complying with WCAG 2.1 AA accessibility standards. The engagement runs roughly two months, from mid‑July to late‑September 2026, with a modest budget typical of county‑level security assessments. • Scope: External & internal network penetration testing (≈ 100 public hosts, ≈ 600 internal devices) plus OWASP Top 10 review of the public website. • Deliverables: Draft report ≤ 10 business days after testing, final report ≤ 10 business days after county comments, supporting data archive, and remediation recommendations. • Requirements: U.S.–based staff, insurance (minimum $2 M professional liability, $2 M cyber liability, etc.), WCAG 2.1 AA compliance, and adherence to county security policies.