Regulatory & Data Security Compliance Support

This contract requires the provision of comprehensive compliance advisory services to ensure the secure handling of state confidential information in alignment with multiple regulatory frameworks including HIPAA, PCI-DSS, IRS 1075, CJIS, and CMS standards. The advisory services must be integrated throughout the duration of the contract to support proper data management, access controls, audit readiness, and operational adherence to federal and state-level security requirements. The contractor will be expected to understand and interpret complex regulatory obligations and translate them into actionable practices that mitigate risk and maintain compliance across all phases of the work. The contract is classified as a subcontract under NAICS code 541611, indicating it pertains to management consulting services, and is issued by the Colorado office of the DOC - Correctional Industries. The solicitation was posted on July 31, 2026, with a firm deadline for responses on August 7, 2026, at 10:00 PM. While the physical location of performance is not specified, the services are tied to handling sensitive state information under jurisdictional standards, implying that work may involve collaboration with state systems or facilities in Colorado. The procurement is not designated with a specific set-aside category, and no point of contact is listed, meaning interested parties must refer to the provided online portal for further details and submission instructions.