Internal Audit Services – IT Systems & Cybersecurity Audit

The Texas Alcoholic Beverage Commission is seeking qualified providers to conduct a comprehensive internal audit of its IT systems, cybersecurity policies, access controls, and incident response protocols. The audit must align with both NIST frameworks and Texas-specific data protection laws to ensure compliance, resilience, and robust security posture across all digital operations. The scope includes an evaluation of current controls, identification of gaps, and recommendations for improvement, with an emphasis on safeguarding sensitive administrative and consumer data under state regulatory requirements. This subcontract opportunity was posted on July 14, 2026, with a deadline for responses on August 12, 2026. It falls under NAICS code 541512, which classifies computer systems design and related services. The work is to be performed in support of the agency’s operational integrity in Texas, and all proposals must demonstrate expertise in federal and state cybersecurity standards, experience in governmental audits, and the ability to deliver actionable, compliant findings. There is no set-aside classification specified, and interested parties should submit proposals via the provided Texas SmartBuy portal before the deadline.