IT Security Compliance Consulting (CJIS, HIPAA)

The contract seeks advisory services to ensure compliance with CJIS and HIPAA standards for organizations handling criminal justice or health data. Services include conducting comprehensive risk assessments, developing and updating security policies, and providing hands-on support for implementation to meet federal regulatory requirements. The work is focused on strengthening data protection, maintaining audit readiness, and aligning operational practices with the strict controls mandated by these frameworks. This is a subcontract opportunity posted by the state of Utah with a response deadline of August 25, 2026. It falls under NAICS code 541611 for management consulting services and is open to qualified vendors capable of delivering expert guidance in information security compliance. While the exact location of performance is unspecified, the work is expected to support Utah’s agency requirements, with no set-aside preferences indicated. Interested parties must submit proposals by the deadline through the provided online portal.