Light RFP
Nassau County · Nassau County, NY

Cyber Security Consultant

Due Jul 31, 2026·3 days left·General ConstructionView official posting ↗
Issuing agency
Nassau County — Information Technology
Method
RFP
Category
92037 - Networking Services (Including Installation, Security, and Maintenance )
PIN
IT0420-2662
Location
Nassau County, NY
Posted
Apr 21, 2026
Takeaways by LightRFP AI

Generate a quick AI overview of this bid, pulled from its details and the attached documents.

Description

Important Additional Information
Draft
Work Description
CYBERSECURITY CONSULTANT
This RFP seeks to identify the highest value service provider that will be able to fulfill the scope of work.
Proposals should take great care to fully explain services for the quoted costs and differentiate themselves
from competitors.
The County will provide information on its infrastructure, networks, configuration, and names of its
current IT vendors to the winning firm upon award of the contract. Due to the sensitive nature of this
information, this information cannot be provided in advance. Employees working for the selected firm will
need to pass a background check and adhere to security protocol. The selected contractor, and its
employees and agents, may also be required to sign a non-disclosure agreement similarly to the form
included in Appendix D of this RFP.
The scope of work will include, but not be limited to:
• evaluate existing cybersecurity programs and procedures in County departments;
• conduct risk and threat assessments for County IT, District Attorney and Police Department IT
networks;
• Conduct monthly vulnerability scans on County IT and District Attorney IT networks and servers;
• Perform penetration testing, including social engineering, web applications, wireless, internal and
external assets and applications for County IT, District Attorney and Police Department;

• analyze the County’s cybersecurity needs and make recommendations;
• conduct not less than four quarterly onsite visits with departments to assist them in adapting
cybersecurity plans to meet their changing needs;
• provide technical report(s) related to assessing and improving the existing cybersecurity program;
• provide recommendations to modernize and improve security to the network infrastructure;
• provide hands-on support to the County concerning implementing any cybersecurity initiatives; and
• maintain open communications with the County by providing frequent status updates.
The selected contractor will be required to provide reports to the County, as well as provide all findings
and recommended actions to mitigate any issues found. All findings and recommended actions must
include prioritization based on risk, factoring current intelligence into the risk level. The selected
contractor will also be required to include guidance on how to remediate each item, as well as estimated
internal staff hours needed to address each item.
The selected contractor will not remediate any findings unless instructed by the County. The County will
pursue recommended actions using the selected contractor’s guidance as appropriate. The County will
make all final decisions regarding their IT system operations.

Documents (sign in on the Nassau board to download): Cybersecurity Consultant RFP wo Vendor Code of Ethics ver1.2.pdf, 2026.pdf, Cybersecurity Consultant RFP ver. 1.1_addendum.pdf, IT-2026RFP Questions_Final Copy Posted.pdf, Cybersecurity Consultant RFP Origininal.pdf

Contact

Name
Steven Wallstedt
Address
Nassau County, NY
Full source recordfrom Nassau County
Print
Text
Request for Proposal Header Information Title: Cyber Security Consultant Solicitation #: IT0420-2662 Buyer / Contact Person: Steven Wallstedt swallstedt@nassaucountyny.gov NIGP Class and Item: 92037 - Networking Services (Including Installation, Security, and Maintenance ) Current Start Date: 04/21/2026 08:00 AM Eastern Daylight Time Current End Date: 07/31/2026 03:00 PM Eastern Daylight Time Anticipated Delivery Date: 07/10/2026 Shipped to Address: Delivery Terms: Free On Board Destination Delivery Notes/Other: Payment Terms: Vendor Specified Payment Notes/Other: Information and Instructions Important Additional Information Draft Work Description CYBERSECURITY CONSULTANT This RFP seeks to identify the highest value service provider that will be able to fulfill the scope of work. Proposals should take great care to fully explain services for the quoted costs and differentiate themselves from competitors. The County will provide information on its infrastructure, networks, configuration, and names of its current IT vendors to the winning firm upon award of the contract. Due to the sensitive nature of this information, this information cannot be provided in advance. Employees working for the selected firm will need to pass a background check and adhere to security protocol. The selected contractor, and its employees and agents, may also be required to sign a non-disclosure agreement similarly to the form included in Appendix D of this RFP. The scope of work will include, but not be limited to: • evaluate existing cybersecurity programs and procedures in County departments; • conduct risk and threat assessments for County IT, District Attorney and Police Department IT networks; • Conduct monthly vulnerability scans on County IT and District Attorney IT networks and servers; • Perform penetration testing, including social engineering, web applications, wireless, internal and external assets and applications for County IT, District Attorney and Police Department; • analyze the County’s cybersecurity needs and make recommendations; • conduct not less than four quarterly onsite visits with departments to assist them in adapting cybersecurity plans to meet their changing needs; • provide technical report(s) related to assessing and improving the existing cybersecurity program; • provide recommendations to modernize and improve security to the network infrastructure; • provide hands-on support to the County concerning implementing any cybersecurity initiatives; and • maintain open communications with the County by providing frequent status updates. The selected contractor will be required to provide reports to the County, as well as provide all findings and recommended actions to mitigate any issues found. All findings and recommended actions must include prioritization based on risk, factoring current intelligence into the risk level. The selected contractor will also be required to include guidance on how to remediate each item, as well as estimated internal staff hours needed to address each item. The selected contractor will not remediate any findings unless instructed by the County. The County will pursue recommended actions using the selected contractor’s guidance as appropriate. The County will make all final decisions regarding their IT system operations. Supporting Documentation File Name File Type Last Uploaded Date Addendum May 26, 2026.pdf application/pdf 05/26/2026 Cybersecurity Consultant RFP Origininal.pdf application/pdf 04/20/2026 IT-2026RFP Questions_Final Copy Posted.pdf application/pdf 05/12/2026 Cybersecurity Consultant RFP wo Vendor Code of Ethics ver1.2.pdf application/pdf 05/26/2026 Cybersecurity Consultant RFP ver. 1.1_addendum.pdf application/pdf 05/14/2026
Email
swallstedt@nassaucountyny.gov
Title
Cyber Security Consultant
Detail
Text
Solicitation Details Header Information Solicitation Type: RFP Title: Cyber Security Consultant Solicitation #: IT0420-2662 Contract #: Department: Information Technology Buyer / Contact Person: Steven Wallstedt NIGP: 92037 - Networking Services (Including Installation, Security, and Maintenance ) Start Date: 04/21/2026 08:00 AM Eastern Daylight Time Due Date: 07/31/2026 03:00 PM Eastern Daylight Time Anticipated Delivery Date: 07/10/2026 Shipped to Address: Delivery Terms: Free On Board Destination Payment Terms: Vendor Specified Delivery Notes/Other: Payments Notes/Other: Commodities NIGP Class and Item 92037 - Networking Services (Including Installation, Security, and Maintenance ) Supporting Documentation File Name Cybersecurity Consultant RFP wo Vendor Code of Ethics ver1.2.pdf Addendum May 26, 2026.pdf Cybersecurity Consultant RFP ver. 1.1_addendum.pdf IT-2026RFP Questions_Final Copy Posted.pdf Cybersecurity Consultant RFP Origininal.pdf Close var apex_img_dir = "https:\u002F\u002Fstatic.oracle.com\u002Fcdn\u002Fapex\u002F24.2.14\u002F"; var apex = {env: {APP_USER: "nobody",APP_ID: "533",APP_PAGE_ID: "227",APP_SESSION: "5455358104100",APP_FILES: "r\u002Fitspace\u002F533\u002Ffiles\u002Fstatic\u002Fv228\u002F",WORKSPACE_FILES: "r\u002Fitspace\u002Ffiles\u002Fstatic\u002Fv117\u002F",APEX_VERSION: "24.2.14",APEX_BASE_VERSION: "24.2",COMPATIBILITY_MODE: 24.2,NONCE: "IWR1C0s9CPBNsZ9-WlmUzw"}, libVersions:{cropperJs:"1.6.2",domPurify:"3.2.4",fontapex:"2.4",fullcalendar:"6.1.15",hammer:"2.0.8",jquery:"3.6.4",jqueryUi:"1.13.2",maplibre:"4.6.0",mapboxGlRtlText:"0.3.0",markedJs:"14.1.2",prismJs:"1.30.0",oraclejet:"17.0.10",turndown:"7.2.2",monacoEditor:"0.51.0",lessJs:"4.2.0"}}; apex.da.initDaEventList = function(){ apex.da.gEventList = [ {"triggeringElementType":"BUTTON","triggeringButtonId":"B203830098172974755","bindType":"bind","executionType":"IMMEDIATE","bindEventType":"click","anyActionsFireOnInit":false,actionList:[{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,javascriptFunction:function (){ apex.theme42.dialog.cancel(true) },"action":"NATIVE_DIALOG_CANCEL"}]}, {"triggeringElementType":"JQUERY_SELECTOR","triggeringElement":".print-summary","bindType":"live","executionType":"IMMEDIATE","bindEventType":"click","anyActionsFireOnInit":false,actionList:[{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_ID",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTU2Mzk4NjgxMzI2OTYwODAw\u002F5RWGe_41cn_RDNgKU_E4fsA_hq1yWc36yY8IZM_7GSFLrTAAPwk4x4xO3_HEpjo6O_rH5hwsly134P8fV8Eg_g","attribute01":"JAVASCRIPT_EXPRESSION",attribute05:function(){return (this.triggeringElement.id )},"attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_TITLE",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTU2Mzk4MjIyMjYzOTYwODAw\u002FEJMmiGhueDUBZHApx98N85zcpEG45mncD3vRYVXBvwphIo5XNJhTnXuQ7HFvskD0M4DaqECXd0ttQPlJzubigw","attribute01":"SQL_STATEMENT","attribute04":"#P0_SPEC_ID","attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_TITLE,P0_SPEC_ID",javascriptFunction:AOP.callAOP,"ajaxIdentifier":"REEgVFlQRX5-OTU2Mzk3Njk3NTg3OTYwODAw\u002FcSNP1VY6y2jKSGuA7O_u83ENVEDXTEqC1F18TMgeZfzjvcuVjhiqifR78jch_7Jh4sn2YkHYh6NEySr2uNjRRw","attribute01":"Print Summary ","attribute05":"PLSQL_SQL","attribute14":"BROWSER","action":"PLUGIN_BE.APEXRND.AOP_DA"}]}, {"triggeringElementType":"BUTTON","triggeringButtonId":"B807135905519767554","bindType":"bind","executionType":"IMMEDIATE","bindEventType":"click","anyActionsFireOnInit":false,actionList:[{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_ID",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-ODA3MTM1OTg3NTI0NzY3NTU1\u002FXgLxDV81TPgrkgjkk_hePYZfktpsPt2myf0ZqAVXCFPlb91MLqM-ThbeQrmQJYjBlaaieFwPcaZkSWkVL1FOjQ","attribute01":"PLSQL_EXPRESSION","attribute04":"#P227_SPEC_ID","attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_TITLE",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTU3NjcwMjA1OTY5NDQwMjM5\u002FoxXWGpUeomWjXIben6TNK0gjgZKcWzFpevDUBg4k0xkUxs0p_ia50QTlex1dY9PaepvROI5BKntk3dIQ9PVCRg","attribute01":"SQL_STATEMENT","attribute04":"#P0_SPEC_ID","attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_ID,P0_SPEC_TITLE",javascriptFunction:AOP.callAOP,"ajaxIdentifier":"REEgVFlQRX5-ODA3ODU4NDMyOTM5MTg0NjQz\u002FgAQI0KebyizUsMXOoOHaPl4aagBU6shN_cr7veDy5RcxDulJa0H2AYVO-VCKeiY84_pD_lbjkqqbL9awU8iqIQ","attribute01":"Print Solicitation","attribute05":"PLSQL_SQL","attribute14":"BROWSER","action":"PLUGIN_BE.APEXRND.AOP_DA"}]}, {"triggeringElementType":"JQUERY_SELECTOR","triggeringElement":".print-vendor-bid","bindType":"live","executionType":"IMMEDIATE","bindEventType":"click","anyActionsFireOnInit":false,actionList:[{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_ID",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTQ4ODc3NjcyNTc3MzM3NTc3\u002FF4LgVHFYtQu7N4UHZeevmUcZnbAWqkF8TLqed-SLgT6OKu9ktbuTApq3RTEFFnVkYYOXJlf4UclVn72Qq3COXw","attribute01":"JAVASCRIPT_EXPRESSION",attribute05:function(){return (this.triggeringElement.dataset.specId )},"attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_BID_ID",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTQ4ODc4MjU2MzU4MzM3NTgz\u002F5etd3mIlVcuEX_QJzACQ1mHR5G46mCimzjAHAWYZUypYKAnGpbGqEkoAyTYZR1ISKvkGLZDE779W-5VeUk18Vg","attribute01":"JAVASCRIPT_EXPRESSION",attribute05:function(){return (this.triggeringElement.dataset.bidId )},"attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_TITLE",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTQ4ODc3NTU4NTExMzM3NTc2\u002FZqcNM2_cZYqnv_iOrbBZxV0BtmbbnHCXQ6xxhcNnUQagONIM6kRDWik6Ic3JCTciSsmoI6Z3axtOov0VjmRe9w","attribute01":"SQL_STATEMENT","attribute04":"#P0_SPEC_ID","attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_TITLE,P0_SPEC_ID,P0_BID_ID",javascriptFunction:AOP.callAOP,"ajaxIdentifier":"REEgVFlQRX5-OTQ4ODc3NDc3NjYwMzM3NTc1\u002FUs_N95q8HWepVU22sxLk3BCw6h__2PAEnU3UN4Oi0yCQu_GiNQFr_kjRQ9i9vLXrD9af40fru8ZU8slqDlvPYg","attribute01":"Print Vendor Bid","attribute05":"PLSQL_SQL","attribute14":"BROWSER","action":"PLUGIN_BE.APEXRND.AOP_DA"}]}, {"triggeringElementType":"JQUERY_SELECTOR","triggeringElement":".print-solicitation","bindType":"live","executionType":"IMMEDIATE","bindEventType":"click","anyActionsFireOnInit":false,actionList:[{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_ID",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTU2NDY2MjA0OTE0ODY4NTIw\u002F1HiciEg8KVMOui4M_afkNZy6q2pN42r3HIrwivzH0LoCQESBVFk_-UQzFS65yQbi_5DuaDGFbiH5qN45Manplw","attribute01":"JAVASCRIPT_EXPRESSION",attribute05:function(){return (this.triggeringElement.id )},"attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_TITLE",javascriptFunction:apex.da.setValue,"ajaxIdentifier":"REEgVFlQRX5-OTU3NjcwMTA1OTk4NDQwMjM4\u002FVfa6fsnhfRcF869W9SM81zSkIv6LPRBgnqcH9QqUOjh8zMFNGJGCJx-vZ5SMFt-TcCojWPPvOpe4gcexM1RHXw","attribute01":"SQL_STATEMENT","attribute04":"#P0_SPEC_ID","attribute09":"N","action":"NATIVE_SET_VALUE"},{"eventResult":true,"executeOnPageInit":false,"stopExecutionOnError":true,"waitForResult":true,"affectedElementsType":"ITEM","affectedElements":"P0_SPEC_ID,P0_SPEC_TITLE",javascriptFunction:AOP.callAOP,"ajaxIdentifier":"REEgVFlQRX5-OTU2NDY1NjU0OTcwODY4NTE4\u002FjMRBeobwFoxjJrBNJnXhxq8RoPIsXDNhx0s3UkGlMBdZZLRjRdG2LoYNqfl8UWqVSnP9rzAdBlIe-RFmMWI3ag","attribute01":"Print Solicitation","attribute05":"PLSQL_SQL","attribute14":"BROWSER","action":"PLUGIN_BE.APEXRND.AOP_DA"}]}]; } var htmldb_delete_message='Would you like to perform this delete action?'; apex.jQuery( function() { apex.page.init( this, function() { try { (function(){apex.widget.report.init("R203498603527154141","UkVHSU9OIFRZUEV-fjIwMzQ5ODYwMzUyNzE1NDE0MQ\u002FR_vn_ilsaNFSaJgy5LPmSBkKYFuFgRLJPanGTr0AWsqgqRfJ_qBrqkH1T4lorzQnG0ClTWkltEu39_Ir4OxZDw",{"lazyLoading":false,"internalRegionId":"203498603527154141"});})(); (function(){apex.widget.report.init("R203498771331154143","UkVHSU9OIFRZUEV-fjIwMzQ5ODc3MTMzMTE1NDE0Mw\u002FXoiMPtnK3zo3ku45BUc7zNV_631BYvAkaGOjKlFLAOASpG1IfgfDrqCbtLvIrdjhW2YUEUDwF2fnV3adAb0Vdw",{"lazyLoading":false,"internalRegionId":"203498771331154143"});})(); } catch(e) {apex.debug.error(e)}; apex.item.waitForDelayLoadItems().done(function() { try { (function(){apex.da.initDaEventList(); apex.da.init();})(); apex.theme42.initializePage.modalDialog(); apex.page.warnOnUnsavedChanges(); } finally { apex.event.trigger(apex.gPageContext$,'apexreadyend'); }; }); }); });apex.pwa.cleanup( { serviceWorkerPath:'\u002Fords\u002Fr\u002Fitspace\u002Fncp\u002Fsw.js?v=24.2.14-37047947105266\u0026lang=en' } );
Items
P227 DEPT
IT
P227 NIGP
92037 - Networking Services (Including Installation, Security, and Maintenance )
P227 BUYER
Steven Wallstedt<br>
P227 TITLE
Cyber Security Consultant
P227 SPEC ID
3114621923135474605305
P227 END DATE
07/31/2026 03:00 PM Eastern Daylight Time
P227 START DATE
04/21/2026 08:00 AM Eastern Daylight Time
P227 PAYMENT TERMS
1
P227 DELIVERY TERMS
12
P227 SPEC NIGP CODE
92037
P227 SOLICITATION NUM
IT0420-2662
P227 SOLICITATION TYPE
RFP
P227 SPEC DELIVERY DATE
07/10/2026
Doc Names
Cybersecurity Consultant RFP wo Vendor Code of Ethics ver1.2.pdf, 2026.pdf, Cybersecurity Consultant RFP ver. 1.1_addendum.pdf, IT-2026RFP Questions_Final Copy Posted.pdf, Cybersecurity Consultant RFP Origininal.pdf
Nigp Full
92037 - Networking Services (Including Installation, Security, and Maintenance )
Contact Name
Steven Wallstedt
Solicitation Type
RFP
Spec Id
3114621923135474605305
Status
Amended
Modal Path
f?p=533:227:16831550494490:::227:P227_SPEC_ID:3114621923135474605305&cs=3ldjJE6REjBVsohVQlZkOdj7_GW6p1rvVFrpLbWOzTrHTNKEy0m-38fQCZb6xwaScZaNtSQ4HDVlmEPCv_SVyNw&p_dialog_cs=HrByjU84zKZurbZ6euTO5ps-UUj_LoPCAk0Rl0wD7TyY5-2KKho17Uk4WIbYwIZFt1sAA-FScVQVoOWSIZI1Pg
Department
Information Technology
End Date Raw
07/31/2026 03:00 PM EDT
Instructions
Yes
Issue Date Raw
04/21/2026 08:00 AM EDT
Print Fetched
Yes
Solicitation Number
IT0420-2662

Source: Nassau County (solicitation NASSAU-IT0420-2662), retrieved via the Nassau County formal solicitation board. View the official posting — always confirm requirements and deadlines with the issuing agency.