Specifications include, but are not limited to: The Port of Tacoma is soliciting proposals from firms interested in providing auditor services for cybersecurity (information security). The Port anticipates awarding a 3-year contract to begin May 10, 2023, with two one-year options for renewal at the sole discretion of the Port, for a possible total of five years this contract will not exceed a total of $240,000.00 ($80,000.00 annually). Port IT Systems Overview: • Number of workstations/laptops = 361 • Mobile devices = 106 • Application = 107 • Servers (physical/virtual) = 141 • Datacenters = 1 primary and 1 alternate • Hybrid environments = private network on-premises and cloud Port Cybersecurity Program Overview: • Annual Pen Test for the last 5 years • Annual third-party audits for the last 3 years • Cybersecurity Oversight Committee that meets monthly • Annual Cybersecurity Projects (2020-2023) to address audit findings and newly identified risks • Annual Cybersecurity Program review with potential Cybersecurity Insurance Providers • Real-Time Cybersecurity Dashboard • Managed Detection and Response Services Firm with Virtual SOC and IR retainer services
