Security & Compliance Implementation

The contract requires the implementation of a comprehensive security and compliance framework aligned with SOC 2 Type 2 and ISO 27001 standards, focusing on robust audit logging, strict access controls, and timely incident reporting. All systems must be configured and validated to meet these rigorous certifications, with a critical mandate to report and respond to any security breach within ten days of detection to ensure regulatory adherence and operational integrity. The scope demands documented evidence of controls in operation over a sustained period, not just at a point in time, to satisfy the Type 2 audit requirements, emphasizing continuous monitoring and enforcement of security policies. This subcontract is issued by the City of Detroit and falls under the NAICS code 541512, indicating it involves computer systems design and related services. The solicitation was posted on June 22, 2026, with proposals due by July 8, 2026, creating a tight four-week window for submission. The place of performance and point of contact details are unspecified, suggesting the work may be performed remotely or at an undisclosed location within Michigan. The contract does not indicate a set-aside status, making it open to all eligible vendors, and the focus remains squarely on delivering a compliant, auditable security infrastructure meeting industry best practices and government expectations for data protection.