New Mexico Services Portal #OCS2026.01

Scalable Third-Party Cyber Risk Management Framework for New Mexico Local Entities

The New Mexico Office of Cybersecurity is seeking a vendor to design, develop, and deliver a scalable, multi-tenant Third-Party Risk Management (TPRM) framework for local entities participating in the SLCGP grant. - Government Buyer: - State of New Mexico, Office of Cybersecurity - OEMs and Vendors: - No specific OEMs or vendors are named in the solicitation - Products/Services Requested: - Design, development, and delivery of a TPRM framework, program, and toolset - Solution must support higher education, county governments, local municipalities, and tribal governments - Must standardize processes for discovering, tiering, assessing, contracting with, and continuously monitoring third-party vendors, resellers, software providers, and managed service providers - Unique or Notable Requirements: - Solution must be scalable and multi-tenant to accommodate varying cybersecurity maturity levels - Focus on reducing systemic supply-chain cybersecurity risk across diverse local entities - No specific technology stack or OEM is mandated, allowing for flexible solution proposals

Description

The New Mexico Office of Cybersecurity is planning a project to design, develop, and deliver a scalable, multi-tenant Third-Party Risk Management (TPRM) framework, program, and toolset. This framework is intended for entities participating in New Mexico's SLCGP grant, including Higher Education Institutions, County Governments, Local Municipalities, and Tribal Governments. The objective is to reduce systemic supply-chain cybersecurity risk by standardizing how local entities of varying cybersecurity maturity levels discover, tier, assess, contract with, and continuously monitor third-party vendors, resellers, software providers, and managed service providers. Quotes should be sent to Melissa.Gutierrez@cyber.nm.gov. The event is open from September 15, 2026, to October 16, 2026.

View original listing