Information Security & Compliance Program Implementation

The contract requires the development and ongoing maintenance of a robust information security program aligned with NIST 800-53 Rev. 4, FedRAMP, SOC 2, and ISO 27001 standards, ensuring full compliance across all operational and technical controls. The scope includes preparing for and sustaining audit readiness, implementing continuous monitoring practices, and establishing effective oversight of subcontractors to guarantee adherence to the required security frameworks. All activities must be performed in support of the Minnesota State Colleges and Universities System, with the program designed to protect sensitive institutional data and meet federal and industry-specific compliance obligations. The subcontract is open for response through June 23, 2026, and falls under NAICS code 541512 for computer systems design services. Performance is expected to align with the needs of the Minnesota state system, though specific geographic details for place of performance are not provided. Interested parties must submit proposals by the deadline, and the opportunity is accessible via the public bidding portal linked in the posting. Subcontractors must demonstrate proven expertise in implementing and sustaining enterprise-grade information security programs across multiple regulatory standards and be prepared to work under the oversight of the agency’s compliance requirements.