Cybersecurity Capability Maturity Program Assessment

Background
The University of Michigan (U of M) is seeking proposals to partner with its technology teams across U of M Health hospital systems. The mission of the university is to serve the people of Michigan and the world through excellence in creating, communicating, preserving, and applying knowledge. The goal of this contract is to conduct a series of interviews, information gathering, and assessment activities to evaluate the cybersecurity program maturity in alignment with the NIST Cybersecurity Framework (CSF). This initiative involves U-M Health West and UM-Health Sparrow.

Work Details
The selected supplier will conduct interviews and gather information to assess the cybersecurity capabilities across U of M Health hospital systems. The assessment will focus on evaluating the maturity of their cybersecurity programs based on established frameworks. The supplier is expected to provide an initial assessment for a three-year period with an option for two additional assessments as mutually agreed upon. All materials associated with the proposal will become the property of the University.

Period of Performance
Initial assessment for three years with options for two additional assessments.

Place of Performance
University of Michigan Health hospital systems, including U-M Health West and UM-Health Sparrow.

Bidder Requirements
Suppliers must submit an 'intent to bid' before questions and submissions can be accepted. Preference will be given to goods or services manufactured or provided by Michigan businesses if competitively priced. Suppliers must comply with all applicable laws and regulations, including signing a Business Associate Agreement (BAA) if awarded a contract.