CJIS & SOC 2 Compliance and Security Monitoring

The CJIS and SOC 2 Compliance and Security Monitoring subcontract supports the Maryland Office of the Public Defender by providing security auditing and compliance validation for eDiscovery projects. The scope of work includes conducting annual SOC 2 Type II audits, monitoring CJIS security policies, and managing incident detection workflows through the use of SIEM tools. A critical component of the engagement is ensuring strict adherence to breach notification service level agreements. Key deliverables for this contract include annual SOC 2 Type II reports, detailed security audit logs, and comprehensive incident response reports. The opportunity is categorized under NAICS code 541690 and is managed by the Office of the Public Defender Administration. Interested parties must note the response deadline of November 9, 2026.