Data Management and Information Security Compliance

The contract titled Data Management and Information Security Compliance requires strict adherence to ISO 27001 and SOC 2 Type 2 standards for the secure handling of all project data. It is structured as a subcontract under NAICS code 518210 and is issued by the City of Detroit through its Michigan agency division. All parties involved must implement and maintain robust information security controls, including comprehensive access management, data encryption, audit logging, and continuous monitoring to ensure compliance with these internationally recognized frameworks. The contract emphasizes end-to-end data integrity and confidentiality throughout the project lifecycle, with expectations for documented procedures, staff training, and third-party risk assessments. The opportunity was posted on July 13, 2026, with a firm response deadline of August 12, 2026, at 6:00 PM. There is no set-aside designation specified, and no point of contact or physical office address is provided in the details. The place of performance is not defined, suggesting work may be performed remotely or across multiple locations, provided all security requirements are met. Bidders must demonstrate proven experience and validated controls aligned with ISO 27001 and SOC 2 Type 2 certifications through supporting documentation and audits. The opportunity is accessible online via the Detroit BonfireHub platform, and compliance with technical and procedural mandates will be a primary evaluation criterion.