Security & Compliance Monitoring (Penetration Testing & Audits)

The contract requires the vendor to conduct annual security and penetration testing as well as regular vulnerability scans to ensure ongoing compliance with federal standards, specifically under CMS ARC-AMPE guidelines. All testing results must be documented and formally submitted to the South Carolina Department of Health and Human Services Office of Children’s Services. In addition to technical assessments, the contractor is responsible for maintaining, reviewing, and updating incident response policies to remain aligned with current regulatory requirements and industry best practices. The work is performed under a subcontract arrangement, with the procurement managed by Sfaa Procurement Services on behalf of the State of South Carolina, and is classified under NAICS code 541612 for computer systems design and related services. The solicitation was posted on June 23, 2026, with responses due by September 1, 2026, at 3:00 PM Eastern Time. There is no set-aside designation specified, and performance location details are not provided, implying the work may be conducted remotely or across state facilities as needed. The contract is accessible via the South Carolina Business Opportunity portal, and all deliverables are subject to oversight by state health and human services authorities to ensure the integrity, confidentiality, and availability of critical systems serving vulnerable populations.