TX-RAMP Compliant Cybersecurity & Audit Readiness

The contract seeks subcontracting services to ensure full compliance with TX-RAMP Level 2 cybersecurity controls, requiring the implementation and maintenance of robust access management protocols, comprehensive audit logging capabilities, and regular vulnerability assessments to meet state-mandated security standards. The work must demonstrate alignment with Texas-specific regulatory requirements for information systems handling sensitive data, with a focus on continuous monitoring, incident response readiness, and documentation of security controls. The solicitation is open for responses until August 6, 2026, under the NAICS code 541612 for computer systems design services, and is issued by the Texas Department of State Health Services. While no set-aside type is specified, the performance location and administrative oversight are tied to the state agency, and participation requires adherence to Texas’ standardized cybersecurity framework governing state-contracted technology services. All deliverables must be completed in accordance with TX-RAMP Level 2 criteria to ensure audit readiness and ongoing compliance.