Cybersecurity and Data Privacy Compliance Assessment

The contract seeks a subcontractor to perform a comprehensive cybersecurity and data privacy compliance assessment of a platform, with a focused evaluation of adherence to data protection standards, particularly concerning personally identifiable information and the Family Educational Rights and Privacy Act. The assessment must examine existing controls, policies, and procedures to identify gaps, risks, and areas requiring remediation to ensure full alignment with regulatory requirements. This engagement is critical for safeguarding sensitive educational and personal data processed by the platform and for maintaining the integrity of the system against potential breaches or noncompliance violations. The opportunity is issued under the agency name MPTAP and is tied to the state of Mississippi, with a response deadline of July 8, 2026, and a posted date of June 29, 2026. The North American Industry Classification System code 541611 indicates this is a computer systems design and related services contract. There is no specified set aside status or additional details regarding the point of contact or physical location of performance, and all submissions must be made through the provided public portal. The subcontractor is expected to deliver a thorough analysis, actionable recommendations, and documented evidence of compliance findings to support the agency’s obligations in protecting student and individual privacy.