Cybersecurity & Compliance Auditing

The contract seeks a third-party provider to deliver comprehensive cybersecurity assessments, audit readiness support, and ongoing compliance monitoring aligned with NIST, ISO, CMMC, and education data protection standards. The work will involve evaluating security controls, preparing organizations for formal audits, and ensuring continuous adherence to federal and industry-specific compliance frameworks, particularly those relevant to educational institutions handling sensitive data. The provider must demonstrate technical expertise in assessing and enhancing cybersecurity postures across diverse environments, with a focus on measurable outcomes and documentation that supports regulatory compliance. This is a subcontract opportunity posted by the State of Utah with a response deadline of May 28, 2026. The North American Industry Classification System code is 541612, indicating it falls under Computer Systems Design and Related Services. While specific performance locations and point of contact details are not provided, the solicitation is accessible through Utah’s BonfireHub platform, and bidders must ensure their proposals address all technical, operational, and compliance requirements outlined in the solicitation materials. The contract does not specify a set-aside type, meaning it is open to all eligible contractors regardless of business size or ownership status.