IT Security Assessment Services

The University of Iowa is requesting qualifications from suppliers to provide information security risk assessment services. Assessments will utilize frameworks such as HIPAA, NIST CSF, NIST SP 800-30, SP 800-37, SP 800-53, SP 800-171, ISO 27001, and CMMC/CUI. The selected provider will perform detailed cybersecurity evaluations to strengthen institutional data protection and compliance programs.