South Carolina Sfaa Sfaa #5400027903

South Carolina Statewide IT Security Assessments and Incident Response Services Solicitation

The State of South Carolina is seeking proposals for a statewide term contract to provide IT Security Assessments and Incident Response Services for state agencies and eligible entities. - Government Buyer: - State of South Carolina, Office of State Procurement, SFAA Division of Procurement Services - Contact: Yolanda Cohen, CPPB - Scope of Services (Four Lots): - Vulnerability Assessments and Penetration Testing - Includes internal/external testing, penetration testing, vulnerability assessments, false positive analysis, and detailed reporting - IT Security Assessment Remediation - Remediation of Critical/High vulnerabilities, design and implementation of remediations, patching, integration of security solutions, and deliverables such as Business Continuity Plans - IT Security Incident Response Services - Rapid identification, containment, and remediation of cybersecurity incidents, including digital forensics - Privacy Incident Response Services - Handling privacy compliance for unauthorized disclosure, including documentation, notification, public relations, and legal compliance - Key Requirements: - Compliance with a wide range of security and privacy standards (e.g., HIPAA, FISMA, CJIS, FedRamp, StateRamp, FERPA, GLB, GDPR, PCI-DSS, HITRUST, ISO/IEC 27001, NIST Cybersecurity Framework, SOC 2) - Qualified personnel across multiple IT security roles - Fixed pricing with a 1.25% administrative fee - Mandatory for state agencies, optional for local entities - Strict adherence to state laws and security requirements - No specific OEMs or vendors are named; open to qualified providers

Description

This solicitation is for IT Security Assessments and Incident Response Services. The contract is a statewide term contract for the State of South Carolina. The procurement is managed by the Materials Management Office, and offers must be submitted online by August 21, 2026, at 11:00 AM. The solicitation includes multiple amendments and requires compliance with various security and privacy standards.

View original listing