Cybersecurity and Risk Compliance Support

The contract titled Cybersecurity and Risk Compliance Support seeks a subcontractor to provide comprehensive cybersecurity documentation services aimed at achieving and maintaining SOC 2 and HIPAA compliance. The scope includes supporting the development and maintenance of policies, procedures, and controls necessary for audit readiness and regulatory adherence, as well as assisting with third-party risk assessments to evaluate vendors and partners for data security posture. The subcontractor will also be responsible for helping to design and implement data handling plans that align with industry standards and legal requirements, ensuring secure and compliant management of sensitive information throughout its lifecycle. This effort is critical to safeguarding patient and operational data under the jurisdiction of Johnson County in Kansas. The solicitation was posted on July 13, 2026, with a response deadline of August 24, 2026, and is classified as a subcontract under NAICS code 541611, which pertains to management consulting services including cybersecurity and risk advisory. While no specific place of performance or point of contact is indicated, work is expected to support Johnson County’s broader objectives for data security and regulatory compliance. Interested parties must submit proposals through the provided online portal by the stated deadline to be considered for award. The contract does not specify a type of set-aside, indicating it is open to all qualified subcontractors regardless of size or ownership classification.