Cybersecurity and Data Compliance Management

The contract requires comprehensive cybersecurity and data compliance management for vendor systems that handle sensitive data belonging to the University System of New Hampshire, with strict adherence to federal and state regulations including FERPA, HIPAA, PCI DSS, and NH RSA 359-C:20. Vendors must implement robust technical and administrative safeguards to protect personally identifiable information, health records, and financial data, ensuring all systems are encrypted both at rest and in transit. The contract mandates a fully documented incident response plan capable of rapid detection, containment, and reporting of any data breaches or security events, as well as ongoing audit readiness to demonstrate continuous compliance through regular reviews, documentation, and third-party assessments. All parties are expected to maintain operational integrity and accountability through rigorous policy enforcement, staff training, and monitoring processes aligned with industry best practices. The subcontract underscores the critical importance of data sovereignty and regulatory alignment, requiring vendors to operate under the oversight of the University System of New Hampshire with full transparency into their security posture. The solicitation closes on June 10, 2026, and is classified under NAICS code 541512 for custom computer programming services, indicating the scope includes both technical implementation and ongoing compliance management rather than off-the-shelf solutions.