IT & Data Security Compliance Services

The contract requires comprehensive IT and data security compliance services to ensure all benefits administration systems meet stringent regulatory and security standards, including SOC 2 Type II, HITRUST, AES-256 encryption, and TLS 1.2 or higher protocols. These requirements are critical for safeguarding sensitive personal and health-related data processed within the system and maintaining trust and regulatory alignment within the benefits administration function. The provider must demonstrate verified controls and ongoing adherence to these frameworks with documented evidence and audit readiness. The contract also mandates strict breach notification procedures, ensuring timely and accurate reporting of any data security incidents to relevant stakeholders and authorities. The work is classified as a subcontract under NAICS code 541512, with a response deadline of May 29, 2026, and is managed by the Texas Human Resources agency. Performance is expected to align with federal and state-level data protection obligations, though specific geographic performance locations are not defined, indicating potential remote or cloud-based service delivery. All deliverables must be structured to support continuous compliance, not just one-time certification.