Security and Compliance Planning

The contract seeks the development of comprehensive security, compliance, and disaster recovery plans aligned with FedRAMP, HIPAA, and IRS Publication 1075 standards to ensure robust data protection and regulatory adherence. The work involves designing and implementing tailored frameworks that meet the rigorous requirements of these federal guidelines, addressing aspects such as access controls, data encryption, incident response, audit readiness, and continuous monitoring. The successful contractor will be responsible for delivering documented plans that are not only compliant but also practical and scalable within the operational environment of the Energy & Environment Cabinet. This is a subcontract opportunity with a solicitation posted on August 4, 2026, and a response deadline of August 19, 2026, at 1:30 PM Eastern Time. The North American Industry Classification System code is 541618, indicating it falls under other management consulting services. The place of performance is listed as “Other,” suggesting flexibility in location, and the contract is managed under the Kentucky Energy & Environment Cabinet. There is no set-aside designation specified, and while contact information is not provided, interested parties must submit proposals via the designated online portal linked in the posting.