DBM CCU DoIT Scanning for PII

The Department of Budget and Management's Central Collections Unit (DBM CCU) is seeking a specialized scanning and information security service through this state contract opportunity. The primary objective is to conduct a comprehensive scanning process to identify and assess personally identifiable information (PII) in alignment with the State of Maryland Information Technology Security Manual. The contracted vendor will be responsible for providing detailed scanning results that offer clear remediation guidance and actionable insights for ensuring proper PII protection and compliance. Specific deliverables will include a thorough analysis of existing information systems, identification of potential PII vulnerabilities, and recommended corrective actions. The solicitation was posted on August 1, 2025, with proposals due by August 25, 2025, indicating a relatively tight procurement timeline of approximately three weeks. Qualified vendors must demonstrate expertise in information security, PII scanning technologies, and comprehensive risk assessment methodologies. The evaluation criteria are likely to emphasize technical capabilities, compliance understanding, and the vendor's ability to provide precise, actionable recommendations for PII management.

While specific set-aside designations are not explicitly detailed in the provided information, Maryland state contracts often have provisions supporting minority-owned, women-owned, and small business enterprises. The procurement appears focused on technical capabilities rather than restricting respondents to specific business classifications. No incumbent vendors are mentioned in the current documentation, suggesting this might be a new or re-competed procurement effort. The scanning and PII compliance service will likely require integration with existing DBM CCU information technology infrastructure, necessitating vendors with adaptable technological solutions. Although no specific budget range is provided, information security and compliance scanning services for state-level central collection units typically represent moderate to significant investment, potentially ranging from $50,000 to $250,000 depending on the complexity and scope of the required scanning and remediation services. Vendors should be prepared to demonstrate robust technological capabilities, comprehensive understanding of Maryland's information security requirements, and a systematic approach to PII protection and vulnerability identification.