Cybersecurity and Data Protection Services

The contract seeks qualified providers to maintain robust cybersecurity policies, incident response plans, and data protection measures for the secure operation of COTA systems and the safeguarding of passenger information. This subcontract, classified under NAICS code 541512, focuses on continuous protection against cyber threats through proactive policy management, timely incident detection and response, and adherence to stringent data privacy standards. The work is tied to the Ohio Department of Transportation’s Operations division and requires full compliance with federal and state regulations governing critical infrastructure and personal data security. Interested parties must submit proposals by May 8, 2026, with no set-aside provisions specified. The contract does not include a designated point of contact or specific performance location, implying that services may be delivered remotely or on-site as needed. The primary objective is to ensure the integrity, confidentiality, and availability of COTA’s digital systems and the sensitive personal data of transit users, with emphasis on resilience against evolving cyber risks and compliance with industry best practices.