Cybersecurity and Information Security Compliance

The contract requires the implementation and ongoing maintenance of comprehensive cybersecurity controls aligned with Exhibit E, mandating adherence to FIPS 140-2 standards for data encryption, strict access control protocols, robust audit logging mechanisms, and a defined incident response framework. All electronic materials must be securely destroyed in compliance with established protocols to prevent unauthorized recovery or data exposure. The work is scoped as a subcontract under the Internal Services Department of California, with performance obligations centered in Los Angeles. The solicitation was posted on June 24, 2026, and responses are due by August 12, 2026, under the NAICS code 541611, which corresponds to management consulting services, indicating the focus is on expert-driven security implementation rather than hardware procurement.