Cybersecurity and Data Protection Compliance

The contract requires the implementation of comprehensive cybersecurity controls for systems hosted on Nutanix platforms, with a focus on ensuring data integrity and regulatory compliance. Key requirements include the enforcement of end-to-end encryption for all sensitive information, mandatory storage of all data within the United States to meet jurisdictional and sovereignty standards, and the deployment of robust malware prevention measures to detect, block, and respond to threats in real time. Additionally, the contractor must establish a protocol for immediate detection and reporting of any security breach, with a strict deadline of 72 hours from discovery to notify the appropriate parties. All solutions must be fully integrated into the existing Nutanix infrastructure without disrupting operations, and the contractor is expected to demonstrate proven experience in securing cloud-based enterprise environments. This subcontract falls under NAICS code 541611, indicating it pertains to computer systems design and related services, and is being procured by the State of Utah through its designated agency. The solicitation was posted on May 19, 2026, with responses due by May 26, 2026, creating a narrow window for qualified vendors to submit proposals. While the physical location of performance is unspecified, all data handling must comply with U.S.-based storage mandates. There is no set-aside designation or point of contact identified, suggesting the opportunity is open to any eligible contractor capable of meeting the technical and compliance requirements outlined. The urgency of the deadline underscores the state’s immediate need to strengthen its cybersecurity posture for critical hosted systems.