IT Security Assessment Services

The University of Iowa is seeking a qualified supplier to provide information security risk assessment services. The supplier will be expected to conduct enterprise-wide assessments, support CMMC/CUI compliance, and provide additional assessments as needed. The supplier must have experience with standard frameworks and controls, including HIPAA, NIST CSF, and ISO 27001. The contract will be for an initial term with the option to extend for up to 5 years. Key aspects of the job include: • Conducting comprehensive risk assessments • Providing CMMC/CUI compliance support • Performing additional assessments as needed • Aligning with standard frameworks and controls • Providing detailed reports and recommendations • Ensuring compliance with federal regulations and university procedures