Cybersecurity and Data Protection Compliance Support

The contract entails providing comprehensive third-party security assessments to ensure robust cybersecurity and data protection compliance, with a primary focus on achieving SOC 2 Type II certification to validate the effectiveness of security controls over time. It also requires adherence to NIST SP 800-88 standards for secure media sanitization, ensuring that all data remnants are properly erased from storage devices to prevent unauthorized recovery. Additionally, the scope includes active participation in incident response planning and reporting, establishing clear protocols for identifying, containing, investigating, and documenting security incidents to maintain system integrity and regulatory alignment. This subcontract is issued by the Comptroller of Public Accounts under the Texas state agency and is classified under NAICS code 541611, indicating it pertains to administrative management and general management consulting services. The opportunity was posted on July 16, 2026, with a response deadline of September 2, 2026, and the place of performance is unspecified but likely tied to Texas state operations. The contract emphasizes outsourced expertise in cybersecurity compliance, requiring the contractor to demonstrate proven capability in executing assessments, sanitization procedures, and incident response frameworks under stringent state and federal guidelines.