Cybersecurity and Compliance Implementation

The contract requires the implementation and thorough documentation of a comprehensive set of security controls to safeguard sensitive data and ensure regulatory compliance. Key measures include deploying two-factor authentication across systems, establishing encrypted communications channels, enforcing robust anti-malware policies, and separating service accounts to minimize risk exposure. The contractor must align all security practices with the stringent requirements of PCI DSS, HIPAA, and CJIS, ensuring that infrastructure handling financial, healthcare, and law enforcement data meets or exceeds federal standards. Additionally, the contractor is responsible for providing full support during SOC 2 and SOC 3 audits, including preparing documentation, facilitating assessments, and addressing findings to maintain ongoing compliance validation. The project is classified as a subcontract under NAICS code 541920 and is managed by the California Public Works Department. While no specific location or point of contact is provided, the work must be performed in alignment with the department’s operational and compliance obligations. The solicitation was posted on July 13, 2026, with a firm deadline for responses on July 27, 2026. Interested parties must submit their proposals to the linked procurement portal before the deadline, ensuring all technical and compliance deliverables are clearly outlined and feasible within the scope of the contract.