Information Security and Cyber Risk Management

This subcontract for Information Security and Cyber Risk Management is issued by the Vermont Department of Economic Development to provide security frameworks and monitoring for prime contractors involved in Efficiency Vermont Home Energy Loan projects. The primary objective is to protect borrower financial data through the implementation of Appendix B Information Security Requirements, the use of encryption and secure storage tools, and the management of breach response protocols. The selected provider is required to maintain 2 million dollars in Cyber Liability Insurance and must deliver completed Information Security Questionnaires along with ongoing security audit logs. This opportunity falls under NAICS code 541512, with a response deadline of September 28, 2026.