Cybersecurity & Data Protection Services

The contract titled Cybersecurity & Data Protection Services requires the implementation and ongoing maintenance of robust security controls to safeguard sensitive data throughout and after a cloud migration process. Key responsibilities include enforcing multi-factor authentication, conducting comprehensive vulnerability management, encrypting personally identifiable information at rest and in transit, and ensuring single-tenant hosting architecture to isolate client data from shared environments. These measures are critical to maintaining compliance, mitigating risks, and preserving the confidentiality and integrity of data handled by SunLine Transit Agency in California. The opportunity is structured as a subcontract with a submission deadline of August 7, 2025, and is categorized under NAICS code 541511, indicating it pertains to computer systems design and related services. While no set-aside designation or point of contact details are provided, the work is expected to be performed in alignment with the agency’s data protection standards within the state of California. The contract emphasizes continuous security operations rather than one-time implementation, underscoring the need for proactive monitoring, adaptation to emerging threats, and documented adherence to best practices in cloud security.