Information Security Program Alignment and Compliance

This subcontract for Information Security Program Alignment and Compliance provides cybersecurity consulting services for prime contractors working on State of Ohio software projects. The primary objective is to align security policies, procedures, and tools with recognized industry frameworks, including NIST SP 800-53, NIST 800-171, NIST CSF, ISO 27001, CIS Critical Security Controls, HiTRUST, and CMMC. The selected provider will utilize SIEM tools and vulnerability scanners to ensure framework alignment and deliver essential documentation, including information security program reports and security policy manuals. This opportunity is managed by the Office of Information Technology and is categorized under NAICS code 541519, with a response deadline of September 9, 2026.