Cloud Compliance and Audit Services

The contract titled Cloud Compliance and Audit Services requires the vendor to conduct or support third-party compliance audits for industry-standard frameworks including SOC 2 Type II, ISO 27001, and HITRUST CSF. The scope includes preparing comprehensive audit packages, coordinating with internal and external stakeholders, and implementing corrective actions to address findings identified during audits. All activities must be reported directly to the County’s Chief Information Security Officer to ensure alignment with security policies and regulatory obligations. The work is performance-based and focused on maintaining and enhancing the security posture of the County’s cloud environments. This subcontract is issued by the Department of Internal Services under the State of California with a place of performance in Los Angeles. The NAICS code 541611 indicates it falls under Management Consulting Services, specifically emphasizing information technology compliance and risk assessment. Although the solicitation was posted on May 12, 2026, the response deadline has already passed on May 5, 2026, suggesting the award process has concluded or is underway. The contract does not specify a set-aside designation, and no point of contact information is provided. The associated bidding portal link offers access to award details and vendor selection outcomes.