Information Security Governance & Policy Framework Development

General work description:

The City of Florissant, Missouri is seeking proposals from qualified cybersecurity consulting firms to assist in the development of a comprehensive Information Security Governance Framework including policies, standards, and operational procedures to guide the City's technology security program.

The selected consultant will assist the City in evaluating current security practices and developing formal documentation aligned with recognized best practices such as:

• NIST Cybersecurity Framework
• CIS Critical Security Controls
• CJIS Security Policy (for law enforcement systems)
• Cyber insurance best practices
• Municipal government data protection requirements

The goal is to establish a structured and sustainable information security program appropriate for a municipal government environment.

https://www.florissantmo.com/topic/index.php?topicid=136&structureid=16

The City of Florissant serves approximately 55,000 residents and operates multiple municipal departments including administration, public works, parks and recreation, finance, and police services.

The City's technology infrastructure includes:

• Approximately 450 endpoint devices
• 12 city-owned facilities
• Multiple internet connections
• Private and public Wi-Fi networks
• Multiple firewall environments
• Network switching infrastructure
• Windows domain environment
• Cloud-based and on-premise software systems
• Email and email archiving systems
• Off-site backup and disaster recovery services
• Video surveillance systems
• Financial, parks & recreation, and police software systems

The City seeks to formalize its cybersecurity governance structure and ensure appropriate documentation exists to support operational security, compliance, and risk management.