Secure Cloud Infrastructure Hosting & Compliance

The contract seeks a subcontractor to provide FedRAMP- or ISO 27001-compliant cloud hosting services for a secure SaaS ticketing platform, ensuring robust data encryption, continuous audit readiness, and timely incident reporting. The infrastructure must meet stringent federal and international security standards to protect sensitive institutional data, with a focus on maintaining compliance throughout the service lifecycle. Hosting must support uninterrupted platform availability and demonstrate proven capabilities in managing security controls aligned with either FedRAMP moderate or high baseline or ISO 27001 requirements. The solicitation is issued by the Minnesota State Colleges and Universities System under NAICS code 518210 for cloud computing services. Submissions are due by September 23, 2026, and the award will serve as a subcontract in support of the system’s broader technology infrastructure. While specific geographic performance locations are not defined, the hosting environment must ensure data residency and security governance consistent with applicable state and federal regulations. All proposed solutions must include documented processes for monitoring, logging, breach notification, and third-party assurance to maintain operational integrity and regulatory compliance.