2026 FISMA Compliance Assessment and 2 more items

FORVIS MAZARS LLP has been awarded a contract by Virginia Commonwealth University effective June 29, 2026, with a cumulative value of $70,000. The contract encompasses three distinct information security assessments totaling one year of performance. The services include a 2026 Federal Information Security Management Act (FISMA) Compliance Assessment valued at $40,000, a 2026 Web Application Security Testing Assessment valued at $20,000, and a 2026 Disaster Recovery Plan Testing engagement valued at $10,000. All deliverables are to be provided to VCU Procurement.

These security assessments represent core cybersecurity and compliance services intended to strengthen Virginia Commonwealth University's information security posture across regulatory compliance, application security, and business continuity functions. The contract structure demonstrates a phased approach to institutional risk management, with the largest allocation directed toward federal compliance requirements, followed by preventative application security testing and disaster recovery preparedness. FORVIS MAZARS LLP, as the prime contractor, will deliver these services directly to the university's procurement office in Virginia.