This bid is for third-party risk management consulting services for a statewide project across New Mexico, United States.
This bid has closed.
Buyers often post the same work again. Set an alert below and we will email you when a similar New Mexico bid is posted.
What the job is
Assessment: Review existing legal authorities, procurement policies, IT agreements, and cybersecurity clauses; identify gaps in vendor risk management.
Standards: Recommend baseline vendor requirements aligned with NIST SP 800-53 Rev. 5 moderate controls and NIST SP 800-161.
Templates: Develop model TPRM ordinances and contract clauses covering security controls, data protection, incident reporting, audit rights, monitoring, insurance, subcontractors, offshoring, and termination.
Deliverables and timing: Assessment and gap reports, standards recommendations, ordinance and contract templates, and a final completion report within six months.
Pricing: Provide hours and hourly rates by activity, total pricing, and a not-to-exceed amount with a written commitment to complete the scope within that cap.
XL Eagle