MM Information Assurance Third Party Vendor Assessment

The University of Michigan is seeking a supplier to provide Third Party Risk Management Services, which will provide real-time and historical insights into cyber risk posture and vendor intelligence. The scope of the project includes providing a comprehensive solution that meets the University's requirements, including a high-level description of the steps of how the services will be provided and any associated value-added services. The University expects to enter into an agreement with the successful supplier for a three-year period with an option to extend for two additional one-year periods. The supplier will be required to provide a detailed proposal, including an executive summary, scope of proposed solution, comprehensive list of assumptions, project staffing and resumes, cost proposal, and technical standards documentation. • Key features of the proposal include: • Description of the overall solution or methodology for the event • High-level description of the steps of how the services will be provided • Value-added services solution that meets the requirements • Client relationship management approach • Project organization chart and resumes for the project manager and proposed staff • Cost proposal, including a breakdown of costs and payment schedule • Technical standards documentation