Information Security Compliance and Data Protection

The contract requires ongoing maintenance of ISO 27001 certification and the production of annual SOC 2 Type 2 reports to ensure robust protection of sensitive event-related data, including details of attendees, vendors, and payment transactions. Compliance with these international and industry-specific security standards is mandatory to guarantee the confidentiality, integrity, and availability of all personal and financial information handled in connection with city-sponsored events. The work is structured as a subcontract under the City of Detroit’s procurement framework, with a response deadline of August 24, 2026, and is classified under NAICS code 541611 for management consulting services. The performance location and point of contact are not specified, and the opportunity is open without set-aside designations, indicating eligibility for all qualified subcontractors regardless of size or business category.