Data Center Physical & Logical Security Compliance

The contract titled Data Center Physical & Logical Security Compliance requires the vendor to ensure that data centers adhere to recognized international and industry-specific compliance standards including ISO 27001, SSAE 16/18, ISAE 3402, and PCI-DSS. The focus is on maintaining robust physical and logical security controls to protect sensitive information and infrastructure, with an emphasis on audit readiness. The vendor must provide comprehensive, accurate, and timely documentation and reporting that demonstrates ongoing compliance, enabling the University of Michigan to confidently undergo external audits and meet regulatory obligations. All deliverables must be structured to support verification by third-party auditors and must reflect current, enforceable security policies and procedures. This is a subcontract opportunity posted on May 1, 2026, with a required response deadline of June 22, 2026. The NAICS code 518210 indicates the work falls under Data Processing, Hosting, and Related Services. The contracting entity is the University of Michigan, acting through its Michigan office, with no specific place of performance or point of contact listed. Interested parties must submit proposals via the provided online portal at the SciQuest link. The contract does not specify any set-aside status, and participation is open to all qualified subcontractors capable of meeting the stringent compliance and documentation requirements outlined.