Information Security Program Implementation & Audit

The Information Security Program Implementation and Audit subcontract focuses on performing security assessments and establishing security programs for prime contractors working on Ohio Department of Public Safety projects. The primary objective is to protect contract data by ensuring confidentiality, integrity, and availability through the implementation of the NIST 800-53 moderate level baseline. To achieve this, the project utilizes established frameworks such as FISMA 2014, NIST 800-171, or ISO 27001, with final deliverables including a secure data environment, comprehensive security program documentation, and detailed compliance reports. Managed under the Ohio Department of Public Safety's Information Technology Cdsb, this opportunity falls under NAICS code 541519. The solicitation was posted on September 30, 2026, with a response deadline set for October 15, 2026. Interested parties can find further details and manage the process through the OhioBuys portal.