Third-Party Security Audits & Risk Assessments

The contract requires the performance of annual independent IT security audits and timely responses to risk assessment questionnaires to ensure alignment with NJ Transit’s security standards. The work is scoped to validate compliance through objective third-party evaluations, focusing on identifying vulnerabilities, assessing control effectiveness, and providing documented evidence of adherence to required protocols. The audits must be conducted thoroughly and consistently each year, while risk assessments demand accurate and complete replies to formal inquiries that test the contractor’s security posture against NJ Transit’s specific criteria. This subcontract is open for bidding with a response deadline of June 25, 2026, and falls under NAICS code 541618, indicating it involves other management consulting services, specifically related to security and risk evaluation. It is managed by New Jersey Transit and is intended to safeguard the agency’s information technology infrastructure by leveraging external expertise. There is no set-aside designation, and the place of performance and contact details are not specified, suggesting the work may be performed remotely or across multiple locations as needed to support NJ Transit’s system-wide requirements.