Regulatory Compliance Security Risk Assessment

The University of Iowa is seeking proposals from qualified suppliers to conduct an extensive security risk assessment that complies with PCI and HIPAA standards. The contract, titled "Regulatory Compliance Security Risk Assessment," aims to identify and address security vulnerabilities related to sensitive financial and health information, ensuring the university's adherence to regulatory requirements. The solicitation, posted on August 29, 2024, with a response deadline of September 19, 2024, emphasizes the importance of timely bid submissions through the eBid system, as the project involves a comprehensive evaluation of security protocols and infrastructure. The contract size is estimated to range between $50,000 and $250,000, reflecting the scope and critical nature of the assessment. The procurement process involves detailed specifications and requires vendors to demonstrate their capability to deliver thorough and compliant security assessments. The primary point of contact is Andy Lane, reachable via email or phone, who will facilitate communication and clarify bid requirements. The university underscores the importance of allowing ample preparation time given the extensive nature of the bid. This project aligns with the university's commitment to maintaining robust security measures and regulatory compliance, ensuring the protection of sensitive data and infrastructure. Additional related solicitations, such as RFQs for print signage, fire engine re-bids, and garage door installations, indicate a broader scope of procurement activities managed by various entities, emphasizing the university’s ongoing infrastructure and compliance initiatives.