Cloud Security & Compliance Audit Support

The contract seeks support for documenting and remediating security controls to achieve SOC 2 Type II, StateRAMP, or equivalent compliance standards for a cloud-based Portfolio and Project Management solution. The work will involve alignment with industry-recognized frameworks to ensure the solution meets rigorous security, availability, processing integrity, confidentiality, and privacy criteria required for government cloud environments. The subcontractor will be responsible for generating evidence-based documentation, identifying gaps in current controls, and implementing corrective measures to pass third-party audits under these compliance regimes. Performance is expected to support CAL FIRE’s broader cloud initiative, with all activities tied to the NAICS code 541618 for other scientific and technical consulting services. The opportunity was posted on August 5, 2026, with responses due by August 26, 2026, and is structured as a subcontract under the California eProcurement system. While no specific location or point of contact is provided, the work is intended to enable the agency to maintain compliance in its cloud-based operations without identifying a formal set-aside designation or organizational type requirements.