IT Security Assessment Services

The University of Iowa is seeking a qualified supplier to provide information security risk assessment services. The scope of work includes conducting enterprise-wide assessments, supporting CMMC/CUI compliance, and providing risk assessment services. The university follows various frameworks and standards, including HIPAA, NIST CSF, NIST SP 800-30, NIST SP 800-37, NIST SP 800-53, NIST SP 800-171, ISO 27001, and CMMC/CUI. The supplier will be expected to provide deliverables such as risk reports, compliance roadmaps, and remediation plans. Key aspects of the job include: • Conducting enterprise-wide assessments • Supporting CMMC/CUI compliance • Providing risk assessment services • Following various frameworks and standards • Providing deliverables such as risk reports, compliance roadmaps, and remediation plans • Collaborating with the university's IT department and other stakeholders