R27-002 Managed Governance, Risk, Compliance and Cybersecurity Program Management Services

The State of New York is requesting proposals for managed governance, risk, compliance, and cybersecurity program management services under RFP R27-002, with proposals due October 27, 2026.

The scope encompasses strategic planning, policy development, implementation support, training coordination, and ongoing management of governance frameworks, risk assessment and mitigation, compliance monitoring, and cybersecurity oversight. Vendors must demonstrate technical capability, relevant experience, qualified staffing, and proposed methodologies aligned with the state's internal controls and cybersecurity objectives. The RFP establishes performance-based metrics and deliverables tied to specific governance, risk, compliance, and cybersecurity outcomes.

Columbia Advisory Group, LLC was awarded an identical or substantially similar contract within the past five years, signaling incumbent or prior contractor presence in this service area. The RFP document (894 KB) is available for download and contains detailed technical specifications, evaluation criteria, pricing terms, contract duration, renewal options, and funding amounts.