Cybersecurity, Penetration Testing & Compliance

The contract seeks a subcontractor to deliver ongoing cybersecurity services for the Arkansas Department of Transportation, focusing on penetration testing, continuous vulnerability scanning, and sustained SOC2 compliance maintenance. Work must strictly adhere to the Arkansas Office of Technology’s encryption protocols and TLS standards, ensuring all security measures meet state-mandated technical requirements. The services are critical to safeguarding state systems and data, with the contractor expected to provide proactive and consistent security monitoring and reporting to maintain regulatory alignment. The solicitation was posted on May 7, 2026, with responses due by July 17, 2026, and falls under NAICS code 541519 for other computer related services. Although the place of performance and point of contact details are unspecified, the work is tied to Arkansas state infrastructure and must be performed in compliance with all applicable state cybersecurity policies. The contract is classified as a subcontract, indicating it supports a larger procurement or project under the Arkansas Department of Transportation’s Equipment and Procurement division.