Cybersecurity Management and Auditing

The Cybersecurity Management and Auditing subcontract, issued by the Vermont Department of Economic Development, focuses on providing comprehensive security services for prime contractors on FTA-funded RCT projects. The scope of work includes the implementation of security protocols, vulnerability management, and incident response. To maintain system integrity, the contractor will perform regular security audits, penetration testing, and vulnerability assessments utilizing SIEM systems and scanners. A critical component of this engagement is ensuring strict adherence to Federal security standards and HIPAA compliance. The contractor is responsible for delivering detailed security audit reports, vulnerability assessments, and incident response logs. This opportunity was posted on September 3, 2026, with a response deadline of September 25, 2026, falling under NAICS code 541512.