Title
External Network Vulnerability Assessment/Penitration Test
Body
In 2022 the Village Board of Trustees approved a contract with Securance Consulting to perform a cybersecurity assessment of Village information technology infrastructure. This cybercysecurity audit focused on the internal systems and network and not external facing systems. While the internal cyber security analysis is very important, not testing external facing systems has the potential to expose the Village to malicious activity. Three vendors were contacted to provide an external facing cybersecurity analysis along with penetration testing of external facing IP addresses and their systems. The vendors included Securance, Computer Aid, Inc (CAI) and the Center for Internet Security (CIS). The services requested include an external network assessment and penetration test with web application testing along with a report and gap analysis.
The quotes came back from CIS at $18,690, CAI at $30,500 and Securance at $38,350. The CIS quote is significantly lower as CIS is a nonprofit organization that receives funding from government grants with a goal to "improve the overall cybersecurity posture of U.S. Stage, Local, Tribal, and Territorial government organizations".
Financial Impact
All quotes fall within the FY2024 budget for this project.
Recommended Action/Motion
I move to recommend the award for the External Network Vulnerability Assessment/Penitration Test to CIS for $18,690 with a contingency amount of 5% or $934.50 for a total award including contingency to not exceed $19,624.5.