Comprehensive Security Risk Assessment

Pinellas County, Department of Business Technology Services (BTS), seeks a qualified Information Security Services provider to conduct a comprehensive security risk assessment. The assessment will evaluate the County’s information technology infrastructure, systems, and applications to identify potential vulnerabilities, risks, and compliance gaps. The goal is to enhance the County’s overall security posture and protect sensitive information.

Security assessment services are requested for all agencies that fall under the Pinellas County umbrella such as, but not limited, to Pinellas County Board of County Commissioners, Pinellas County Sheriff, Clerk of the Court, Property Appraiser, Sixth Circuit of the Courts (Pinellas), State Attorney, Public Defender, Supervisor of Elections, and Tax Collector.

This comprises approximately 33,000 active IP addresses, across 950 subnets, 86 unique physical addresses, and 100 buildings all located geographically within Pinellas County. The Vulnerability Assessment scope will include the County’s primary datacenter, backup datacenter, approximately 35 server rooms (2,500 Servers), just under 300 communications rooms (network & telecommunications), and 4 AWS and Azure Cloud Environments.

The Applications/Database environment consists of 300 plus applications that support the business needs of Pinellas County Government. The application portfolio consists of in-house development, COTS (Commercial Off The Shelf) and Mainframe solutions. The different development tools used are Java, D2K, ADF, .NET, VB6, MF Cobol and CICS. The database environments used are Oracle and Microsoft SQL Server. The middleware platforms being used are WebSphere and WebLogic.