LIPA Cybersecurity Incident Response and Practices Audit
LIPA is conducting a 12-to-14-week internal audit of its cybersecurity incident response framework and practices across the transmission and distribution system, evaluating the design and operating effectiveness of processes, controls, and governance structures for identifying, responding to, containing, and recovering from cybersecurity incidents. The consultant must demonstrate experience in cybersecurity practices for electric utility operations and familiarity with LIPA and PSEG Long Island's contractual relationship, with work beginning in Q2 2026 and compensation on a time-and-materials basis using hourly rates from the firm's master contract with LIPA. Responses due March 12, 2026.
Categories
Important dates
-
Published
-
Submission deadline
Deadline passed
AI overview
The Long Island Power Authority (LIPA) is seeking professional services to perform a comprehensive internal audit of LIPA's cybersecurity incident response and practices. The audit will evaluate the adequacy and operating effectiveness of processes and controls related to cybersecurity incident response, ensuring compliance with regulatory requirements and strategic goals. The scope of work assesses the design and operating effectiveness of the organization's cybersecurity incident response framework and related cybersecurity practices, evaluating whether processes, controls, and governance structures are appropriately designed to identify, respond to, contain, remediate, and recover from cybersecurity incidents in a timely and effective manner.
LIPA has a First Amendment to the Second Amended and Restated Operations Services Agreement with PSEG Long Island for the management and operation of the Transmission and Distribution system. Consultants must demonstrate experience in cybersecurity practices for electric utility operations and familiarity with LIPA and PSEG Long Island's contractual relationship. The expected timeline for audit completion is 12 to 14 weeks.
Key dates include: RFQ issued February 18, 2026; questions deadline March 2, 2026; response due date March 12, 2026; anticipated award March 2026; anticipated start date second quarter 2026. The selected consultant will be paid on a time and materials basis in accordance with the firm's contract with LIPA, with compensation based on hourly rates from master contracts.
Deliverables will include a comprehensive report detailing findings and recommendations for improvement. Responses are limited to ten single-sided pages including resumes and must include detail of proposed personnel project experience, firm project experience, proposed approach, personnel availability and contract titles, and estimated budget with hourly rates and expense reimbursements per the Internal Audit Services Contract Schedule D.
Resources & contact
Proposal Document
View proposal documentSolicitation number
RFQ-IA-41-2026
Contact
- Joseph LaMotta
- procurement1@lipower.org
Unlock Full Access to Utility Proposals
You're viewing past opportunities. Start a free trial to see active RFPs right now, filter by your utilities, and get real-time alerts — no credit card required.
Already have an account? Log in