Cybersecurity and IT Compliance for Laboratory Data Protection

The contract titled Cybersecurity and IT Compliance for Laboratory Data Protection requires the successful bidder to ensure IT systems adhere to established cybersecurity frameworks including NIST, SOC2, ISO, PCI-DSS, and HITRUST standards, with a specific focus on safeguarding laboratory information. The work involves designing, implementing, and maintaining robust data protection policies that govern the handling, storage, transmission, and disposal of sensitive laboratory data to meet rigorous regulatory and operational requirements. Compliance must be continuously monitored and documented to demonstrate alignment with federal and industry benchmarks, particularly in environments handling high-value scientific data. Performance of this subcontract is designated for Lemont, Illinois, ZIP 60439, and must be submitted by the deadline of July 31, 2026, at 10:00 PM local time. The NAICS code 541512 indicates the scope falls under computer systems design services, emphasizing technical expertise in cybersecurity architecture and compliance management. The contracting entity is Argonne National Laboratory, operating under the U.S. Department of Energy, underscoring the federal importance and sensitivity of the data involved. All activities must align with DOE security directives and support the lab’s mission to protect critical research assets from unauthorized access, breaches, or data loss.