Cybersecurity and Compliance Audit Services

The contract involves providing annual SOC1 and SOC2 Type 2 audits, along with third-party penetration testing and vulnerability assessments to support Metropolitan Community College's compliance with key regulations including FERPA, FCRA, and PCI-DSS. The service provider is required to conduct thorough cybersecurity assessments and generate detailed reports, which must be made available upon request. These efforts aim to ensure robust data protection and maintain regulatory compliance in handling sensitive educational and financial information. The contract is classified under NAICS code 541611 and is designated as a subcontract, with a response deadline of June 30, 2026. The scope of work includes comprehensive audits and security evaluations to identify and mitigate risks, emphasizing continuous compliance and security posture enhancement. The college will rely on these services to validate its controls and safeguard against cyber threats, fulfilling its institutional and legal obligations.