Risk Assessment Application System
California State University, Sacramento is seeking proposals from qualified companies to provide a Risk Assessment Application/System. The system will act as the primary inventory system for critical systems and protected data for the University. The application must be capable of providing both annual and periodic risk assessment reports at the campus and program center levels. The reports must provide mapping risks to industry standards and regulatory compliance measures such as ISO 27002, HIPAA, PCI and FERPA. The application must maintain up to date threat and risk models and information. The technological environment at California State University, Sacramento consists of a central IT organization that supports enterprise business services, i.e., network, email, web portals, and PeopleSoft ERP, while distributed program centers provide direct support for colleges, departments and campus auxiliaries. The selected vendor must be able to meet specifications, detailed in the Request For Proposal. A minimum of seven (7) years experience in the industry is required. Bidders must also provide references from customers who currently utilize the services of the bidder where the project is of similar size and scope. A copy of this solicitation will be released electronically by the University Procurement and Contract Services Department. Bidders interested in participating must register or currently be registered with the University. Vendor Registration can be accomplished by visiting http://www.csus.edu/proc (click on Vendor Registration). Each vendor must select category code 92000 (Data Processing Services/Software) as part of the vendor registration process. Upon completion of registration, vendors must e-mail Dale Clack at [email protected] (Subject Line: Bid#B080004 Risk Assessment Application/System).
