Cybersecurity and Vendor Risk Assessment

The contract titled Cybersecurity and Vendor Risk Assessment is a subcontract issued by the Employees Retirement System of Texas under NAICS code 541512, focused on performing technical cybersecurity assessments to validate adherence to healthcare security frameworks. The vendor is required to complete the Vendor Security Questionnaire outlined in Appendix X as a mandatory component of compliance verification, ensuring alignment with industry-standard protections for sensitive health-related data. This engagement is not tied to a specific set-aside classification and is intended for firms capable of delivering rigorous, audit-ready security evaluations in alignment with healthcare regulatory expectations. The solicitation was posted on May 21, 2026, with a firm response deadline of September 19, 2025, at 4:00 PM, indicating a compressed timeline for submission. The place of performance and agency office address details are unspecified, suggesting work may be performed remotely or as determined by the contractor’s capability. All submissions must be made through the Texas SmartBuy portal, and failure to meet the deadline or complete the security questionnaire accurately will result in non-compliance. The evaluation will center on technical competency, thoroughness of risk assessment methodologies, and demonstrable experience in healthcare cybersecurity frameworks.