Specifications include, but are not limited to: Enterprise-wide risk assessment of Louisville Metro including; External risk assessment and/or penetration test Internal risk assessment and/or penetration test Cloud risk assessment and/or penetration test Executive summary with business impact analysis Technical summary of findings, including critical vulnerabilities and applicable controls Report of Metro’s effectiveness against the CIS Top 20 Critical Controls. Metro’s goals in offering this contract are as follows: Show areas for improvement in critical information systems Use business impact analysis and technical findings to drive long term strategic planning Assess effectiveness of Metro’s current security controls against known TTP’s (Tactics, Techniques & Procedures) The Engineer will be responsible for performing all engineering services through project closeout in accordance with federal, state, and local law, regulations and policies. The scope of work includes but is not limited to the following: 1) prepare preliminary engineering report and cost estimates for proposed CDBG applications, 2) prepare plans and specifications, 3) distribute bid documents, 4) assist in bid opening and prepare bid tabulation, 5) assist in the execution of construction contracts, 6) hold pre-construction conference, and 7) perform construction inspection including periodic reports to the Town and approve all pay requests.