Information Security Assessments & Auditing Services

The state of California is seeking proposals for Information Security Assessments & Auditing Services for the California State University (CSU) system, which includes 23 universities and a systemwide office in Long Beach. The selected firm(s) will conduct up to three IT security audits per fiscal year (July through June) at campus locations provided by the CSU. The audits will involve a hybrid of remote and in-person activities, and the firm(s) will work in tandem with the CSU's Administrative and Audit Services (A & AS) department. The CSU is looking to outsource some or all of the security assessments to an external auditing firm.

The contract has a proposal due date of May 13, 2024, and the RFP documents and all related information can be accessed on the CSU's procurement platform, CSUBUY, at https://bids.sciquest.com/apps/Router/PublicEvent?CustomerOrg=CalState. The procurement is open to all qualified firms, and there are no set-aside designations or restrictions on the types of organizations that can respond. The CSU has not provided any information about incumbent vendors or existing infrastructure that requires integration, nor have they disclosed a specific award value or budget range.