Cyber Third-Party Risk Management Services

The government authority in New Mexico requires a vendor to provide cyber third-party risk management services. The buyer needs the vendor to design, develop, and deliver a scalable, multi-tenant third-party risk management framework program and toolset for local entities participating in state grants. The requested scope includes projects covering cybersecurity governance and planning, cybersecurity risk assessment, vulnerability and attack surface management, cybersecurity training, and workforce development planning. Additionally, the vendor must evaluate existing legal provisions, develop baseline cybersecurity requirements aligned with national frameworks, and create template ordinances for local entities. To qualify, bidders must be an onshore USA organization. The buyer mandates offsite work performance and allows vendors to submit responses digitally through email or online. The buyer is currently looking for proposals to determine the budget, and the source text omits specific evaluation criteria and key dates.