Many penetration tests start out using the request for proposal $($RFP$)$ process to hire a person or organization to complete the pen test and write a documentation RFP Opening May $11,2018$

Background

Joliet Junior College is a comprehensive community college. The college offers pre$-$baccalaureate

programs for students planning to transfer to a four$-$year university, occupational education leading

directly to employment, adult education and literacy programs, work force and workplace development

services, and support services to help students succeed. The College has a combined total of $14,912$ full

time and part time students enrolled in Spring $2018$ classes and $1,950$ staff on its main campus located

within the city of Joliet, and its $5$ extension campuses located in Romeoville, Morris, Frankfort,

Weitendorf, and City Center in downtown Joliet.

Vision Statement

Joliet Junior College will be the first choice.

Mission Statement

Joliet Junior College is an innovative and accessible institution, dedicated to student learning, community prosperity, cultural enrichment, and inclusion. Joliet Junior College delivers quality lifelong learning opportunities empowering diverse students and the community through academic excellence, workforce

training, and comprehensive support services.

I. OVERVIEW

Joliet Junior College $($hereinafter$,"$JJC$")$ is requesting proposals from qualified firms to provide an Information Security penetration testing and operational framework review assessment. The qualified firm will perform a review of JJC security operational framework using an objective vendor$-$neutral framework $($NIST SP $800-53)$ and conduct external, internal, and wireless penetration

tests. This RFP and information contained within should be kept confidential.ort the process.

The College reserves the right to:

$$ Reject any or all offers and discontinue this RFP process without obligation or liability to

any potential Vendor,

$$ Accept other than the lowest priced offer,

$$ Award a contract on the basis of initial offers received, without discussions or requests

for best and final offers, and

$$ Award more than one contract.

Additional proposal requirements are discussed in the SCOPE OF WORK section of this proposal.

II$.$ RFP SCHEDULE

Date $(2018)$ Event

April $20,2018$ Vendors contacted via email $/$ advertised

April $27,2018$ @ $12$:$00$ p$.$m$.$ CST Last date$/$time for submission of written

questions via email

May $2,2018$ by $4$:$00$ p$.$m$.$ CST Responses to questions emailed

May $11,2018$ @ $2$:$00$ p$.$m$.$ CST Proposals must be submitted to the

Attention of: Janice Reedus, Business &

Auxiliary Service Office, Campus Center

Building A$,$ Room $3102,1215$ Houbolt

Road, Joliet, IL $60431$

May $11-18,2018$ JJC Evaluation Team reviews proposal

May $21-22,2018$

$($if necessary$)$

Possible presentations by two top shortlisted firms

June $14,2018$ Notification of Award

III. INSTRUCTIONS TO VENDORS

ADVICE: The department responsible for this RFP is the Business and Auxiliary

Services located at Campus Center, Building A$,$ Room $3100,1215$ Houbolt Rd$.,$

Joliet, IL $60431-8938.$ The JJC contact will be Janice Reedus, Director of Business &

Auxiliary Services, telephone $(815)280-6640$; fax $(815)280-6631.$

$1.$ Title Page

Show the RFP subject, the name of the vendor's firm, address, telephone number, name

of contact person, and date.

$2.$ Table of Contents

Clearly identify the materials by sections and page number$($s$).$

$3.$ Letter of Transmittal

Limit to one or two pages.

a$.$ Briefly state the vendor's understanding of the scope of services to be provided and

make a commitment to provide the services within the time period.

b$.$ List the names of the persons who will be authorized to make representations for the

vendor, their titles, address, and telephone numbers.

$4.$ Profile of the Vendor

Indicate the number of people in the organization and their level of experience and

qualification and the percentage of their time that will be dedicated to this process.

a$.$ Provide a list of the vendor's top ten current and prior two$-$year clients indicating the

type of services the organization has performed for each client.

b$.$ Submit independently audited financial statements $($one copy only$).$ Such information

will be considered in strict confidence.

c$.$ Indicate any third$-$party firms involved with your program and state their role$($s$).$

d$.$ Provide contact information $($name$,$ phone number, and email address of at least three

$(3)$ references for projects of similar size and scope.

$5.$ Scope Section

Clearly describe the scope of services to be provided based upon the information in the

scope section. Respond to each item listed.

$6.$ Responses to Addendum

$7.$ Prices Responses

$8.$ Invoicing Procedure

a$.$ Describe the firm's invoicing procedures.

b$.$ Include documentation identifying all of the vendor's fees.

$9.$ Proposed Contract

Please submit a draft contract for the services being offered.

$10.$ Bidder's Certification Statement

VI$.$ EVALUATION