Data Security and IT Compliance for Subcontractors

Subcontractors working with the Texas Department of Transportation must adhere to strict data security and IT compliance requirements designed to protect sensitive agency information. They are required to implement comprehensive administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of TxDOT data. This includes prohibiting password sharing, enforcing strong access controls, and conducting regular employee training on security protocols and best practices. Any suspected or confirmed data breaches must be reported immediately to the agency without delay, ensuring rapid response and mitigation. The subcontract applies to work performed in El Paso and is governed under NAICS code 541611, which relates to management consulting services. All subcontractors are expected to comply with these security standards as a condition of participation, with no exceptions permitted. The solicitation was posted on June 1, 2026, with the same date serving as the deadline for responses, indicating an immediate or expedited procurement timeline. Compliance is mandatory and non-negotiable, reflecting TxDOT’s commitment to safeguarding state infrastructure data from internal and external threats.