Request for Quotations: Cybersecurity Tabletop Exercise Consultant

The Community Transportation Association of America (CTAA) is soliciting bids from consultants in support of the Federal Transit Administration-funded National Center for Applied Transit Technology (N-CATT) in helping staff to develop a cybersecurity tabletop exercise that will be held as a conference workshop to test small transit agencies’ cybersecurity responses.

The selected consultant(s) will work closely with N-CATT staff on this project.

Interested consultants should read the attached RFQ and submit quotes in the format outlined under Bid Requirements.

This opportunity is open to all:

• Who are able to receive federal funding and are not excluded or affiliated with an excluded organization from receiving federal dollars;
• American organizations ( E.O. 14005  Made in all America, by all of American’s workers);
• Small and minority business; women owned small business and labor surplus firms.

Any questions should be sent to carpenter@ctaa.org, and they will be answered on this webpage.

Please submit your bid as one PDF document to Andrew Carpenter at carpenter@ctaa.org by 11:59pm Eastern on February 21, 2025.

Read the full RFQ here

Q&A

1. Question: How many agencies will/could possibly participate in the N-CATT tabletop workshop?
   Answer: Unfortunately, it can be hard to predict how people will decide which workshop to attend. That said, vendors should plan to have about 50 people in the room, with some arriving late and others leaving early.
2. Question: Under Task 2: Workshop Development: b: When it says ‘Incorporate survey feedback into the workshop content;, is this survey information that has already been sent out or which will need to be created by the winning consultant?
   Answer: Please disregard this item. Our understanding of workshop attendance has shifted and we would not be able to survey ahead of time. However, if a firm feels it would be valuable to gauge audience knowledge at the start of the workshop and can adapt the workshop based on this, please make note of that.
3. Question: Under Task 2: Workshop Development: e: It states ‘Develop interactive exercises for participants to continue practicing with their staff after the workshop’. How many additional exercises would be needed?
   Answer: We encourage vendors to propose the additional exercises they consider sufficient as followup materials.
4. Question: Under Task 2: Workshop Development: f: Do the exercises to be included on the website need to differ from the items developed in item ‘e’ above?
   Answer: They do not need to differ. Firms should, however, ensure that these materials can be used by website visitors without any instruction, compared to the workshop attendees who had time with experts to build context.
5. Question: Task 4: Conversion to On-Demand: a: Is it the responsibility of the winning firm to determine how to convert the content to an on-demand course or is this done in collaboration with N-CATT and its Thinkific platform?
   Answer: It is the responsibility of the winning firm to determine how to convert the content, knowing that Thinkific will be the selected platform. N-CATT will provide Thinkific access to staff of the winning firm to understand the platform as they determine how to convert the content. N-CATT encourages interested parties to preview existing workshops (https://ncatt.thinkific.com/) to get a feel for a likely format. N-CATT and vendor staff will work out intervals for the firm to provide content updates and for N-CATT to evaluate/approve those materials.