Cybersecurity Audit & Compliance Reporting

The contract requires the successful bidder to perform annual third-party cybersecurity audits on behalf of the County, selecting from internationally recognized standards including SOC 2 Type II, ISO/IEC 27001:2013, or HITRUST. These audits must comprehensively assess the organization’s security controls, policies, and practices to ensure alignment with the chosen framework. The deliverable is a formal compliance report, which must be submitted directly to the County’s Chief Information Security Officer for review and recordkeeping. The work is classified as a subcontract under NAICS code 541611, indicating it falls within management and technical consulting services, specifically focused on administrative and other support services related to computer systems. Performance of the audit activities is expected to occur in Los Angeles, and while the solicitation has already closed, the posting date suggests the procurement process was initiated for future implementation in 2026. The contract is administered by the Department of Internal Services under the state of California, highlighting its importance as part of an ongoing public sector effort to maintain robust cybersecurity posture through independent, accredited verification.