Information Security & Risk Assessment Services

The contract seeks qualified providers to deliver information security and risk assessment services focused on supporting organizational compliance with SOC 2 Type II, ISO/IEC 27000, and the HIPAA Security Rule. Key responsibilities include conducting comprehensive ISO risk assessments, facilitating reviews by the DGOG and IPO, and ensuring ongoing adherence to established security frameworks. The work is being procured as a subcontract under the North Carolina agency based at UNC Chapel Hill, with responses due by August 21, 2026. The solicitation falls under NAICS code 541611, indicating it targets management consulting services, specifically in the information security domain. There is no specified set-aside status, and performance location details are not provided, though the contracting entity operates within North Carolina. All submissions must be made through the official portal by the deadline to be considered.