REQUEST FOR PROPOSALS
Cyber Maturity Assessment & Managed IT Services

Issued: October 7, 2025
Deadline for Submittal: November 7, 2025

1. Introduction & Background
Atlanta Neighborhood Charter School (ANCS) invites qualified vendors to submit proposals for a Cyber Maturity Assessment and Managed IT Services engagement. The purpose of this RFP is to identify a partner that can assess the current state of ANCS’s cybersecurity posture, provide strategic recommendations for improvement, and deliver ongoing managed IT services to support secure, reliable operations across both school campuses.

ANCS is a public charter school located in Atlanta, Georgia, serving grades K–8. The school operates across two campuses (Elementary and Middle) with approximately 700 students and 100 staff members. Technology is integral to ANCS’s instructional and operational framework, with systems supporting teaching, learning, communications, data management, and compliance. ANCS seeks to strengthen its cybersecurity maturity and ensure sustainable, secure IT operations.

2. Objectives

  • Conduct a comprehensive Cyber Maturity Assessment aligned to industry frameworks (e.g., NIST CSF, ISO 27001).
  • Identify strengths, weaknesses, risks, and gaps in ANCS’s current cybersecurity program.
  • Develop a remediation roadmap with prioritized recommendations.
  • Provide Managed IT Services that include monitoring, maintenance, incident response, and helpdesk support.
  • Enhance ANCS’s overall cybersecurity resilience and data protection posture.

3. Scope of Work

3.1 Cyber Maturity Assessment

The selected vendor will:

  • Review and assess existing IT policies, procedures, and governance documents.
  • Conduct stakeholder interviews to evaluate security awareness and processes.
  • Perform internal and external vulnerability assessments.
  • Assess cybersecurity controls and capabilities across the following domains:
    • Asset Management
    • Access Control
    • Data Protection
    • Network Security
    • Incident Response
    • Business Continuity / Disaster Recovery
    • Vendor / Third-Party Management
  • Evaluate alignment with NIST CSF, ISO 27001, and other relevant standards.
  • Develop a Cybersecurity Maturity Scorecard summarizing the current state vs. target state.
  • Provide a comprehensive report with findings, prioritized recommendations, and a 12–24 month roadmap.

3.2 Managed IT Services

Following the assessment, the vendor will provide ongoing Managed IT Services
including:

  • Network and infrastructure management (servers, switches, Wi-Fi, firewalls)
  • Endpoint management, patching, and antivirus/EDR protection
  • Data backup, recovery, and continuity planning
  • Monitoring and alerting for security incidents and system performance
  • Regular reporting on service metrics and incidents
  • Annual reassessment of cybersecurity maturity and roadmap progress

4. Deliverables

  • Project kickoff plan and schedule
  • Cyber Maturity Assessment report and scorecard
  • Risk register and remediation roadmap
  • Managed IT Services transition plan
  • Quarterly security and performance reports
  • Final presentation and executive summary

5. Vendor Qualifications

  • Proven experience performing cybersecurity assessments for educational or public sector organizations.
  • Demonstrated familiarity with education IT environments (Google Workspace for Education, student data systems, etc.).
  • Certifications such as CISSP, CISM, CEH, ISO 27001 Lead Implementer, or equivalent.

6. Contract Terms & Conditions

  • Contract Term: 1-year base with option to renew for up to 3 additional years.
  • Confidentiality: Vendor shall maintain confidentiality of all ANCS data and systems.
  • Ownership: All deliverables and reports become the property of ANCS.
  • Compliance: Vendor must adhere to applicable FERPA, COPPA, and state data privacy laws.
  • Termination: ANCS reserves the right to terminate for convenience or non-performance with 30 days’ notice.

7. Submission Instructions

Proposals must be submitted electronically in PDF format to:

Contact:

Dr. NaTasha Woody-Wideman
Director of School Services & Community Outreach
Atlanta Neighborhood Charter School
Email: nwoody-wideman@atlncs.org

8. Reservation of Rights

ANCS reserves the right to:

  • Reject any or all proposals.
  • Waive irregularities or informalities in proposals.
  • Request clarification or additional information from vendors.
  • Negotiate terms with the selected vendor prior to final award.