Cloud Security Compliance Monitoring & Reporting

The contract requires continuous monitoring of cloud systems to ensure ongoing compliance with FedRAMP and GovRAMP security standards, focusing on critical security functions such as vulnerability scanning, log management, and incident response planning. The contractor must implement and maintain automated and manual processes to detect, assess, and remediate security risks in real time, ensuring the cloud environment meets federal security requirements. Regular monthly reporting must be submitted to Utah DTS to document compliance status, identified risks, remediation actions, and system health metrics. The work is structured as a subcontract under NAICS code 541611, with a response deadline of August 3, 2026, and a posting date of July 27, 2026. Performance is expected to support Utah’s state agency cloud infrastructure without specified geographic limitations, and the contract does not indicate a set-aside designation. The contractor is responsible for maintaining rigorous documentation, demonstrating adherence to compliance frameworks, and providing timely, actionable insights to Utah DTS to support decision-making and audit readiness throughout the monitoring period.