Cybersecurity Framework Implementation and Audit Support

This subcontract opportunity, titled Cybersecurity Framework Implementation and Audit Support, is issued by the Ohio Department of Public Safety. The selected contractor will be responsible for aligning information security programs for prime contractors with critical cybersecurity frameworks, including NIST 800-53, NIST 800-171, NIST CSF, ISO 27001, or PCI-DSS. Utilizing SIEM and GRC software, the provider must prepare environments for annual SOC2 audits to ensure a fully compliant security program. A mandatory requirement for this engagement is that the contractor must hold a SOC2 Type 2 Certification. The primary deliverables include the implementation of a compliant security program and the delivery of an annual SOC2 Type 2 report. Interested parties must respond by November 18, 2026, under NAICS code 541519.