The Long Island Power Authority (LIPA) is seeking professional services to perform a comprehensive internal audit of LIPA's cybersecurity incident response and practices. The audit will evaluate the adequacy and operating effectiveness of processes and controls related to cybersecurity incident response, ensuring compliance with regulatory requirements and strategic goals. The scope of work assesses the design and operating effectiveness of the organization's cybersecurity incident response framework and related cybersecurity practices, evaluating whether processes, controls, and governance structures are appropriately designed to identify, respond to, contain, remediate, and recover from cybersecurity incidents in a timely and effective manner.
LIPA has a First Amendment to the Second Amended and Restated Operations Services Agreement with PSEG Long Island for the management and operation of the Transmission and Distribution system. Consultants must demonstrate experience in cybersecurity practices for electric utility operations and familiarity with LIPA and PSEG Long Island's contractual relationship. The expected timeline for audit completion is 12 to 14 weeks.
Key dates include: RFQ issued February 18, 2026; questions deadline March 2, 2026; response due date March 12, 2026; anticipated award March 2026; anticipated start date second quarter 2026. The selected consultant will be paid on a time and materials basis in accordance with the firm's contract with LIPA, with compensation based on hourly rates from master contracts.
Deliverables will include a comprehensive report detailing findings and recommendations for improvement. Responses are limited to ten single-sided pages including resumes and must include detail of proposed personnel project experience, firm project experience, proposed approach, personnel availability and contract titles, and estimated budget with hourly rates and expense reimbursements per the Internal Audit Services Contract Schedule D.