NASPO ValuePoint

National Association of State Procurement Officials (NASPO) ValuePoint

Overview

The NASPO ValuePoint Cybersecurity & Information Security Services Master Agreement is designed to give state agencies cost-effective, high-quality access to advanced cybersecurity services. This contract vehicle provides end users with a streamlined method for procuring proactive and reactive cybersecurity services that protect systems, safeguard sensitive data, and support rapid response to cyber incidents.

Assurit is approved to provide services under the following NASPO categories:

• Category 1 – Risk Assessment & Mitigation Services
• Category 2 – Incident Response Services
• Category 3 – Breach Coach Services

These services help state agencies increase resilience, enhance security posture, and mitigate the impacts of evolving cyber threats.

Contract Categories & Assurit’s Capabilities

Category 1 – Risk Assessment & Mitigation Services

Assurit provides comprehensive risk assessment and mitigation services that help agencies identify, evaluate, prioritize, and mitigate cybersecurity risks. Our approach emphasizes business continuity, operational resilience, and proactive threat reduction.

Core activities include:

• Risk identification and discovery
• Threat likelihood and impact analysis
• Qualitative and quantitative risk evaluation
• Risk prioritization and heat-mapping
• Development of mitigation and remediation strategies
• Implementation support and monitoring
• Continuous reassessment and maturity improvement

Assurit’s cybersecurity experts help agencies safeguard critical assets by providing actionable insights and measurable improvements across their risk landscape.

Category 2 – Incident Response Services

Assurit delivers rapid, expert-led incident response capabilities that help state agencies quickly detect, contain, and remediate cybersecurity incidents. Our trained responders follow industry best practices and legal standards to restore system functionality and prevent recurrence.

Typical services include:

• Threat detection, triage, and analysis
• Malware and adversary eradication
• Incident containment and threat isolation
• System and data recovery
• Forensics and root-cause analysis
• Post-incident reporting, planning, and hardening
• Lessons learned and roadmap development

Assurit ensures agencies have a trusted partner capable of addressing incidents efficiently while supporting long-term resilience.

Category 3 – Breach Coach Services

Assurit provides breach coaching services to guide state agencies through cybersecurity incidents with clarity and confidence. These services offer strategic direction, communication support, and coordination during breach response activities. Note: Any legal services must be approved by the Purchasing Entity at the time of the Work Order, and some entities may require additional internal approvals.

Support services include:

• Incident coordination and strategy
• Stakeholder guidance and communication planning
• Documentation and evidence preservation
• Liaison support between cybersecurity teams and legal/leadership groups
• Assistance in meeting reporting or compliance obligations

Our breach coaching service ensures agencies receive the expert support needed to manage complex breach scenarios effectively.

Participating States

Participating Addenda are executed individually by each state. Availability may vary, and agencies should consult their state procurement office or NASPO ValuePoint site to confirm participation before issuing a work order.

Why Choose NASPO ValuePoint for Procurement?

The NASPO ValuePoint Cybersecurity & Information Security Services Master Agreement offers state agencies several key benefits:

Streamlined Procurement
Access Assurit’s qualified cybersecurity experts quickly through a pre-negotiated, cooperative purchasing agreement.

Cost-Effective Solutions
Competitive, nationally leveraged pricing ensures agencies receive best-value cybersecurity services without lengthy procurement cycles.

High-Quality Vendor Pool
Vendors are pre-vetted and evaluated for technical capability, quality, and experience, reducing risk for state agencies.

Flexible Scope & Ordering
Work orders can be tailored to individual agency needs, including assessment, incident response, mitigation, and breach advisory services.

Trusted Compliance & Standards Alignment
All services comply with applicable legal and regulatory requirements, ensuring agencies meet mission and security objectives.

Partner With Assurit

Assurit brings extensive cybersecurity expertise, proven government experience, and a commitment to mission-driven excellence. Through the NASPO ValuePoint Cybersecurity & Information Security Services Master Agreement, state agencies can rapidly procure the specialized services needed to protect critical systems and respond effectively to cyber threats.

Contact us to learn more about procuring our services through our NASPO ValuePoint contract.