When is the submission deadline?

Submissions are due August 4, 2026. Questions must be submitted by July 28, 2026.

What is the budget for this RFP?

Settle estimates the budget at $1,000,000 – $5,000,000. The issuer has not published an official figure.

It was issued by The Port Authority Of New York And New Jersey. The work is located in New York, United States; New Jersey, United States.

Who is a good fit for this opportunity?

OT and industrial cybersecurity consulting firm. Experience serving government or public sector agencies. Proven expertise in OT penetration testing and threat/risk assessments. Capability to deliver tabletop exercises and cybersecurity education. Experience developing internal security testing teams and program maturity reviews. Capacity to support a multi-year consulting engagement.

Professional Operational Technology Cybersecurity Consulting Services (Due August 4, 2026)

Overview

Cybersecurity & Data Privacy

New York, United States; New Jersey, United StatesPosted: July 15th, 2026Deadline: August 4th, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

A New York government authority is soliciting OT cybersecurity consulting services to assess vulnerabilities, improve resilience, and strengthen internal capabilities. The three-year engagement includes OT penetration testing, program review, training exercises, and risk assessments.

KEY REQUIREMENTS

Must be a legal entity incorporated and headquartered within the United States or Canada
Must have provided OT cybersecurity or OT systems engineering services for at least six years within transportation or other CISA-defined critical infrastructure sectors
Must demonstrate at least $3 million in annual revenue attributable to cybersecurity or OT systems engineering professional services in at least two of the three most recent fiscal years
Must maintain a documented personnel vetting and background screening process aligned with NIST SP 800-53 Rev. 5 or ISO/IEC 27001
Must include personnel holding active OT/ICS certifications such as GICSP, GRID, CCNA-Industrial, or ISA/IEC 62443
Must have completed or be currently performing at least two OT-focused cybersecurity contracts within the past five years for U.S. government entities or regulated critical infrastructure organizations
Must demonstrate experience performing OT penetration testing, risk assessments, adversary simulation, or tabletop exercises within specified timeframes
Must be a Port Authority certified MBE/WBE/SDVOB or demonstrate good faith efforts to meet participation goals

BUDGET

Estimate

$1,000,000 – $5,000,000

CONTRACT DURATION

48 months

TIMELINE

Virtual Pre-Proposal Meeting: July 28th, 2026

Proposal Due Date: August 4th, 2026

QUESTION DEADLINE

July 28th, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

The Port Authority Of New York And New Jersey

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

A government authority in New York is seeking a qualified vendor to provide professional operational technology (OT) cybersecurity consulting services. The engagement is intended to support the agency’s efforts to identify vulnerabilities, improve incident response and recovery capabilities, strengthen internal OT security knowledge, and evaluate the effectiveness of its OT cybersecurity program.

Scope of work includes penetration testing of OT infrastructure, support for building and enabling an internal penetration testing team, OT program review and consultation, tabletop exercises and education, and OT cybersecurity threat and risk assessments. A virtual pre-proposal meeting is scheduled for July 28, 2026.

The anticipated contract term is three years.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due August 4, 2026. Questions must be submitted by July 28, 2026.
What is the budget for this RFP?: Settle estimates the budget at $1,000,000 – $5,000,000. The issuer has not published an official figure.
Who issued this RFP?: It was issued by The Port Authority Of New York And New Jersey. The work is located in New York, United States; New Jersey, United States.
Who is a good fit for this opportunity?: OT and industrial cybersecurity consulting firm
Experience serving government or public sector agencies
Proven expertise in OT penetration testing and threat/risk assessments
Capability to deliver tabletop exercises and cybersecurity education
Experience developing internal security testing teams and program maturity reviews
Capacity to support a multi-year consulting engagement

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works