Comprehensive Information Technology Assessment and Strategic Roadmap

The Town of Nantucket (hereinafter "Town"), through its Information Technology & GIS, invites qualified responders to submit proposals for Comprehensive Information Technology Assessment and Strategic Roadmap. This Request for Proposals is made in accordance with Massachusetts General Laws, Ch. 30B.

The selected vendor will evaluate the Town's current IT environment across six domains: Infrastructure & Network, Cybersecurity & Risk, Applications & Software, IT Governance & Policy, Staffing & Organization, and Enterprise Technology Governance. The assessment will document current state conditions, identify gaps and risks, and produce a prioritized set of recommendations along with a multi-year strategic roadmap.

The selected vendor shall conduct a comprehensive, independent assessment of the Town of Nantucket’s information technology environment. The assessment must address all six (6) domains described below.

• Infrastructure & Network: Inventory and evaluate all physical and virtual infrastructure including servers, storage, networking equipment, and data centers.
• Cybersecurity & Risk: Perform a cybersecurity risk assessment aligned with NIST CSF or equivalent framework.
• Applications & Software: Inventory all enterprise applications, line-of-business systems, and software licenses.
• IT Governance & Policy: Review existing IT policies, procedures, and standards.
• Staffing & Organization: Assess the current IT organizational structure, staffing levels, and skill sets.
• Enterprise Technology Governance: The selected vendor shall evaluate the maturity and effectiveness of the Town’s enterprise technology governance model and provide recommendations for a sustainable, clearly defined framework going forward.

Deliverables

The vendor shall provide all of the following deliverables within **120 days** of contract execution:

• Written Assessment Report: A comprehensive, professionally written report documenting findings, analysis, and recommendations for each of the six (6) assessment domains.
• Presentation to Leadership: A formal presentation of findings to Town leadership, including the Information Systems Department, Town Administration, and relevant Department Heads.
• IT Strategic Roadmap & Action Plan: A multi-year IT strategic roadmap translating assessment findings into an actionable plan.

**Submission method:** Proposals must be submitted **electronically** via the Town's e-Procurement Portal at https://procurement.opengov.com/portal/nantucket. The Town of Nantucket is no longer accepting responses by mail. Price and non-price (technical) proposals must each be submitted separately.

Proposals will be accepted until **2:00 pm on Wednesday, November 18, 2026**.

The Tax Compliance Certification, Certificate of Non-Collusion, and Corporate Vote (corporate proposers only) and LLC Incumbency Certificate (LLC proposers only), must be completed, signed, and enclosed with the technical (non-price) proposal.

**Evaluation:** Submittals that comply with the minimum quality requirements will be further evaluated based on the comparative criteria. Each proposal will be assigned a ranking for each comparative criterion and a composite rating. The Town will negotiate a contract with the highest ranked finalist who proposes a price within the Town’s budgeted amount.

**Insurance:** Technical Proposals must provide proof of Insurance(s). Evidence of financial stability is required, in the form of a bank reference or audited financial statements of the business entity.

**Contract term:** This contract begins January 2027 and expires May 2027.