Digital Security and Content Risk Review Service

The buyer requires a vendor to deliver a digital security and content risk review service. The requested scope involves conducting a non-invasive assessment of the buyer's website and connected third-party systems. The selected vendor must review website security settings, user access, permissions, forms, uploads, publicly accessible files, legacy or migrated content, search indexing, and third-party integrations. Additionally, the vendor must evaluate personally identifiable information and potential risks related to privacy, security, cultural, or reputational concerns. The vendor must also perform an independent review of the live website from an outside party's perspective to identify risks regarding content scraping, misrepresentation, or sensitive Tribal, environmental, and organizational inferences. To qualify, eligibility requires an onshore USA organization only. The vendor will perform all work offsite. The buyer accepts digital submission of responses via email or online, and the buyer is looking for proposals regarding the budget.