15-Appendix P - Audit-Compliance Requirement.pdf
PDF 139 KB Posted
- Attached to
- Family Medical Leave Assistance
- Solicitation number
- BYZ25 - 00028078
- Issued by
- Dallas County, Texas
About this file
This document is Appendix P from a city contract opportunity, focusing on Audit and Compliance Requirements for potential proposers. The city is seeking detailed audit and compliance information across multiple cybersecurity, information security, and privacy standards, including System Organization Controls (SOC-2) Type II, Federal Information Security Modernization Act (FISMA), ISO 27001, and various NIST standards ranging from contingency planning to cybersecurity workforce frameworks.
The appendix outlines specific compliance areas that proposers must address, including Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), Criminal Justice Information System (CJIS), FedRAMP for cloud information protection, and Children's Online Privacy Protection Rule (COPPA). The city emphasizes that audit and compliance are key components in their evaluation and selection process, requiring proposers to provide comprehensive details demonstrating their adherence to these rigorous security and privacy standards. The document includes reference links to additional guidance from ISACA and Ready.gov to support proposers in understanding the compliance expectations.
View the file
Other files
Show all 30
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Appendix P - Audit/Compliance Requirement
Audit/Compliance Requirement
Audit and Compliance is a key component in the City’s evaluation and selection process for proposed solutions. The Proposer is expected to provide audit/compliance details as it pertains to the following areas (provide as much information as possible):
Audit and Compliance is a key component in the City’s evaluation and selection process for proposed solution(s). The proposer is expected to provide audit/compliance details as pertains to the following areas (provide as much information as possible):
System Organization Controls (SOC)-2 Type II Statement on Auditing Standards (SAS) -70 Type II FISMA (Federal Information Security Modernization Act of 2014)
ISO® 27001
NIST Standard 800 -034r1 Contingency Planning NIST Standard 800-37r2 Risk Management NIST Standard 800-39 Security Risk NIST Standard 800 -050 Security Awareness and Training NIST Standard 800 -053r4 Security and Privacy Controls NIST Standard 800 -084 IT Testing, Training, and Exercises NIST Standard 800-181 Cybersecurity Workforce Framework http://www.isaca.org/Knowledge-Center/Standards/Documents/IT-Audit- Assurance-Guidance-1March2010.pdf https://www.ready.gov/business/implementation/IT PCI DSS – Payment Card Industry Data Security Standard HIPAA – Health Insurance Portability and Accountability Act CJIS – Criminal Justice Information System FedRAMP – Protection of information in the cloud COPPA – Children’s Online Privacy Protection Rule
File details come from the government source that posted it. Updated .