Title
Contract for Independent Assessment of NERC Cyber Security Program (B)
Explanation
As presented during the February 2, 2015 City Commission meeting, GRU continues to prepare for the NERC cyber security standards, which go into effect on April 1, 2016. These critical infrastructure protection (CIP) standards will help to ensure that GRU’s ability to deliver reliable energy is not interrupted by cyber-attacks, which are becoming an increasing threat in today’s world. Furthermore, failure to demonstrate adequate compliance to the CIP standards may result in significant fines from NERC.
In order to assure GRU’s compliance readiness for April 1, 2016, it is recommended that an assessment be performed by an experienced and knowledgeable consulting firm to evaluate GRU’s processes and procedures against the CIP standards and provide recommendations for improvement. Additionally, the consultant will perform a vulnerability assessment of GRU’s technical systems to determine the state of readiness for the compliance date. As this is new territory for GRU, it is anticipated that there may be several areas where additional analysis may be needed. Consequently, the difference between the requested amount and the bidder’s quoted amount for services will be held in reserve as a contingency.
A Request for Proposals (RFP) was issued and posted on GRU’s web page by Utilities Purchasing. Of the 18 prospective proposers notified, seven responses were received, including two non-responsive submittals and one no bid. AESI provided the best evaluated proposal. Their cost for these services is $54,630 with $5,250 estimated for travel and expenses. The resulting contract will be in place through December 31, 2016. A summary of the evaluation is attached for your reference.
Fiscal Note
Funding is included in the Energy Delivery budget for FY16 and will be requested in subsequent years if needed.
Recommendation:
The City Commission: 1) authorize the General Manager, or hi...
Click here for full text