University of Iowa Ionwave #18655

University of Iowa Incident Response & Digital Forensic Services Solicitation

The University of Iowa is seeking qualified suppliers to provide Incident Response and Digital Forensic Services for cybersecurity events affecting its diverse environments. - Government Buyer: - University of Iowa, Information Security and Policy Office, Purchasing - Scope of Services: - Establishment of a retainer (~200 hours initially) for advisory support and remote consultation - Major incident response for critical and high severity cybersecurity incidents (e.g., ransomware, data breaches, advanced threats) - Digital forensic investigations across endpoints (Windows, Linux, macOS, virtual machines), cloud platforms (Microsoft 365, Azure, AWS, Google Workspace), email, and mobile devices - Support for academic medical centers, healthcare systems, and research computing environments - Notable Requirements: - Four-hour initial response time for critical incidents - 24-hour coverage during active incidents - Evidence handling with chain-of-custody documentation - Personnel must hold EC-Council Certified Incident Handler (ECIH) and GIAC Certified Incident Handler (GCIH) certifications or equivalent - Experience in higher education, healthcare, compliance investigations (FERPA, HIPAA), ransomware response, and coordination with insurance, legal, and law enforcement - Deliverables: - Incident documentation, action plans, forensic reports, executive briefings, and regulatory support summaries - No specific OEMs or vendors are named; the opportunity is open to qualified suppliers

Description

The University of Iowa is seeking written proposals from qualified suppliers to provide Incident Response and Digital Forensic Services. The services are to be provided in a timely, accurate, and professional manner on behalf of the Information Security and Policy Office. The scope includes retainer services for advisory support and remote consultation, major incident response services for critical and high severity cybersecurity incidents, and digital forensic services across various platforms. The contract will initially last one year with the possibility of four one-year extensions, and the University expects to establish a retainer of approximately 200 hours in the initial agreement.

View original listing