Cybersecurity Compliance and Audit Services

The contract requires the provision of annual independent security audits including SOC 2 Type II and ISO/IEC 27001 certifications, along with comprehensive penetration testing and ongoing compliance reporting for a K–12 transportation system operated by Seattle Public Schools. These services are critical to ensuring the security, integrity, and regulatory adherence of systems handling student transportation data and operations, with all work must align with industry-standard cybersecurity frameworks. The subcontract is classified under NAICS code 541611 for computer-related management services and is posted under the agency's Washington office, with performance expected to support the district’s operational security needs across its transportation network. The contract emphasizes continuous compliance and vulnerability mitigation through structured, third-party evaluations conducted on an annual basis.