Cybersecurity & Information Security Compliance

The contract requires full adherence to PCI DSS, HIPAA, IRS Publication 1075, and applicable North Carolina state laws governing information security and data privacy. Compliance will be maintained through continuous risk assessments, scheduled audits, and real-time monitoring to identify, mitigate, and report vulnerabilities or incidents. The contractor must implement and sustain robust controls that protect sensitive data across all systems and processes under their purview, ensuring alignment with the highest standards for financial, health, and tax-related information. This subcontract is issued by the State of North Carolina’s Statewide IT Procurement Office under NAICS code 541611, with a response deadline of July 1, 2026. The work is expected to support state-wide IT infrastructure and data handling operations, though the specific location of performance is not defined. All activities must be conducted with strict confidentiality and accountability, and the contractor is expected to demonstrate proven expertise in federal and state regulatory compliance frameworks, with a focus on proactive defense mechanisms and documented evidence of ongoing compliance.