Cybersecurity & Data Privacy Compliance Services

The contract under the title Cybersecurity & Data Privacy Compliance Services requires vendors to ensure their systems fully comply with NIST 800-171, PCI-DSS standards, and stringent access control protocols to safeguard student and financial data. This subcontract is issued by the University of North Carolina at Chapel Hill and is intended to enforce robust cybersecurity measures across all systems handling sensitive information, with a focus on preventing unauthorized access, data breaches, and noncompliance with federal and industry regulations. Vendors must demonstrate proven capability in implementing and maintaining these controls in alignment with the required frameworks. The solicitation was posted on July 22, 2026, with a response deadline of September 2, 2026, and falls under NAICS code 541512 for computer systems design services. Performance of the contract is expected to support the agency’s operational environments without restriction to a specific geographic location, as the place of performance is not defined. There is no set-aside classification specified, and the contract is open to eligible subcontractors capable of meeting the compliance obligations. The vendor must be prepared to provide continuous adherence to these standards, with potential audits or evaluations to verify ongoing compliance throughout the contract term.