Data Security and Encrypted IT Services

This contract mandates the secure handling of personally identifiable information, protected health information, and medical information within IT systems deployed in Los Angeles, requiring all data to be encrypted using FIPS 140-2 validated methods and AES-256 cryptography. Only approved cloud storage solutions compliant with these standards may be used, ensuring end-to-end protection of sensitive data throughout its lifecycle. The services are embedded directly into construction-related IT infrastructure, meaning the contractor must integrate secure data protocols into ongoing operational systems without disrupting workflow or compliance. The subcontract is open for response until August 14, 2026, under NAICS code 541512, indicating it pertains to computer systems design services. It is issued by the Internal Services Department of California, with performance location fixed in Los Angeles. All data processing and storage must adhere to federal encryption standards, and unauthorized or non-compliant systems are prohibited. The contract emphasizes rigorous security controls to safeguard highly sensitive information, necessitating proven technical capabilities, documented compliance procedures, and continuous oversight to meet regulatory and operational requirements.