Posted in RFP/RFQ/Tender.

RFP: MUSL seeks Red Team Service Providers


Date of Issuance: February 18, 2022 - Proposals to RFP Due March 18, 2022
The Multi-State Lottery Association (MUSL) is an unincorporated non-profit government benefit association owned and operated by thirty-eight (38) governmental lotteries (Member Lotteries). MUSL assists both Member Lotteries and additional lotteries licensed to sell multi-jurisdictional lottery games such as Powerball, in the operation and sale of those lottery games. As part of its services to Member Lotteries, MUSL develops and maintains websites for the promotion of these games.
MUSL is pursuing red team/external and internal penetration testing from qualified vendors.

Summary of Services Requested
MUSL is requesting proposals for a penetration test project for offices located in Iowa and seeks to establish a non-exclusive agreement with a qualified Vendor.
MUSL expects the selected Vendor to provide a Project Manager who will be assigned to the project for its duration, absent extenuating circumstances, such as termination of employment, inability to complete the assignment, etc.
MUSL may request that the successful vendor enter into a multi-year contract.

Timeline for the RFP and Project
February 18, 2022 - Issue Request for Proposal.
February 28, 2022 - Written questions from interested Vendors due to MUSL. All questions should be sent by email, subject line "2022 Pen Test" to This email address is being protected from spambots. You need JavaScript enabled to view it.
March 7, 2022 - Written responses to Vendor questions distributed to all interested Vendors. Interested Vendors must express their interest before this date to receive the responses to Vendor questions. The responses will not be posted publicly.
March 18, 2022 - Proposals Due and received by MUSL no later than 3:00 pm CDT. Vendors must email a PDF of their proposal, subject line "2022 Pen Test" to This email address is being protected from spambots. You need JavaScript enabled to view it.
March 21, 2022 - April 15, 2022 - Vendor proposal evaluation and selection process begins; evaluation team may require teleconferences with Vendors submitting proposals. Teleconferences, if necessary, will be held via Teams on April 11, 2022.

April 20, 2022- Successful Vendor selected.
April 20 - May 31, 2022 - Contract negotiations. It is anticipated that a project kick-off meeting will be held following successful contract negotiations.
June 10 through August 12, 2022 - penetration testing and reporting timeframe, including re­evaluation testing and reporting.
See the Deliverable Schedule for payments associated with key Project completion dates.
MUSL reserves the right to modify the schedule as may be necessary.
Service Requirements