Security Compliance and Risk Management

The contract titled Security Compliance and Risk Management requires the contractor to ensure adherence to NIST, FISMA, HIPAA, and applicable state security regulations through comprehensive risk assessments, regular audits, and the ongoing maintenance of security documentation. The work is performance-based and must be executed across various locations within Michigan, with no single fixed office address specified. The contractor is expected to implement and sustain a robust security posture aligned with federal and state mandates, focusing on continuous monitoring, documentation integrity, and risk mitigation strategies to protect sensitive information and systems. This subcontract is solicited under NAICS code 541611 and issued by the Michigan Department of Technology, Management and Budget, with a response deadline of May 26, 2026. The procurement does not specify a set-aside type or organizational eligibility requirements, and no point of contact information is provided in the data. Interested parties must submit proposals through the designated Michigan government portal by the stated deadline to be considered for award. Failure to comply with the required frameworks could result in non-conformance and potential contract termination.