State of Idaho

Buyer is seeking to establish master agreements for Cybersecurity and Information Security Services across multiple categories. The services include risk assessment and mitigation, incident response, breach coach services, and notification and credit monitoring services. Buyer aims to create a cooperative purchasing program that will benefit state departments, agencies, and other eligible public entities across all 50 states.

• 5/12/2025 - Pre-Proposal Conference
• 5/16/2025 - Deadline to Receive Questions
• 6/20/2025 - Proposal Due Date

• Must be AICPA SOC 2 compliant covering all 5 functional areas
• Call centers must remain within contiguous United States
• All data centers must be located within Continental United States
• Staff must be able to communicate plainly in English

• Perform vulnerability assessments and privacy impact evaluations
• Design mitigation strategies aligned with security frameworks
• Evaluate threats to data in current environment
• Conduct forensic analysis following security incidents
• Provide incident containment and eradication services
• Coordinate breach response with stakeholders
• Advise on breach notification requirements
• Develop communication strategies for data breaches
• Implement data cleansing and notification services
• Provide 24/7 call center support for affected individuals