# AI workability — SCADA Cybersecurity Services

*Buyer: Town of Bridgewater · Source: merx · Closes: 09 Sep 2026 00:00 UTC*

**AI workability: 38%** (majority needs humans) · notice-only read · bid call: **NO_GO**

- Effort: 600 h total · 226 h AI · 374 h human (low confidence)

## Verdict

AI can support documentation, data analysis, and report drafting, but the core SCADA/OT cybersecurity assessment work is human-led, on-site, and experience-dependent. AI workability is moderate (~38%), not AI-majority.

## Bid call

**NO_GO** — The mandatory experience requirement for SCADA/ICS/OT cybersecurity in critical water/wastewater infrastructure is a clear gap for this shop. AI can support proposal and report writing, but it cannot substitute for the required demonstrated experience, on-site presence, and professional accountability. Without a qualified partner, bidding is unlikely to succeed.

## Deliverables

| Deliverable | Mode | AI share | Hours |
| --- | --- | --- | --- |
| Pre-qualification response (RFPQ2026-01) | ai_assisted | 70% | 40 |
| Assessment planning and methodology | ai_assisted | 50% | 80 |
| On-site SCADA/OT environment review | human_only | 10% | 200 |
| Vulnerability and risk analysis | ai_assisted | 40% | 120 |
| Findings report and recommendations | ai_assisted | 60% | 100 |
| Remediation roadmap and stakeholder presentation | ai_assisted | 50% | 60 |

## Risks

- **[high]** Mandatory experience requirement not met — *Partner with an experienced SCADA/OT cybersecurity firm or decline to bid.*
- **[medium]** Security clearance / background check uncertainty — *Confirm with buyer whether facility security clearance or personnel screening is required; if so, no-go without qualified staff.*
- **[medium]** On-site work at water/wastewater facilities — *Plan site visits and allocate human engineers; AI cannot reduce physical presence requirements.*
- **[low]** Short response window — *Use AI to accelerate drafting of the RFPQ response and supporting documents.*
- **[medium]** Thin tender documents — *Request clarification from the buyer before bidding to understand scope, evaluation, and security requirements.*

## Human roles

- **Cybersecurity lead/assessor** (30%): Required for professional judgment, OT risk interpretation, and sign-off.
- **On-site OT engineer** (25%): Physical inspection, network access, and hands-on assessment of SCADA/OT environments.
- **Project manager / client liaison** (20%): Stakeholder workshops, coordination, and relationship management.
- **Technical reviewer / QA** (15%): Validate AI-generated outputs and ensure technical accuracy.
- **Legal / finance / contract** (10%): Contract signature, insurance, bonding, and compliance.

## Why not more AI

- Cannot perform physical on-site inspections of SCADA/OT environments.
- Cannot provide certified professional judgment or sign-off.
- Cannot attend stakeholder workshops or build client relationships.
- Cannot access OT networks without human setup and authorization.
- Cannot substitute for demonstrated experience in critical water/wastewater infrastructure.

## Requirements & compliance

| Ref | Requirement | Status |
| --- | --- | --- |
| RFPQ2026-01 | Qualified firms must demonstrate experience in Supervisory Control and Data Acquisition (SCADA), Industrial Control Systems (ICS), Operational Technology (OT), and cybersecurity services related to critical water and wastewater infrastructure. | gap |

## Evaluation criteria

- **Not specified** (N/A): Evaluation criteria were not included in the available notice or document facts.

## Key dates

- 2026-08-20T07:30:00-04:00 — Publication
- 2026-09-09T14:00:00-04:00 — Closing

## Gaps in source documents

- No detailed scope of work or number of facilities.
- No evaluation criteria or weighting.
- No contract duration or value.
- No explicit security clearance, onsite presence, or certification requirements.
- No information on required insurance or bonding.
- No reference contract requirements beyond mandatory experience.

## Assumptions

- The project includes both a pre-qualification stage and, if shortlisted, delivery of SCADA/OT cybersecurity assessments.
- Total effort estimate of 600 hours is a rough planning figure; actual effort depends on number and size of facilities.
- No security clearance is explicitly required in the available documents, but critical infrastructure work may still require background checks.
- AI tools are used under human supervision and cannot independently perform security assessments.
- The shop has no existing SCADA/OT cybersecurity reference contracts.

---

*Generated by GovContract from public tender documents. Human review required before acting on bid decisions.*