Cyber Third-Party Risk Management

Description: The New Mexico Office of Cybersecurity seeks a contractor to design, develop, and deliver a scalable, multi-tenant third-party risk management framework, program, and toolset for entities participating in New Mexico’s SLCGP grant. Work includes assessing local legal and procurement authorities, analyzing gaps, recommending cybersecurity standards, and developing model ordinances and standardized contract provisions. Deliverables include assessment and gap-analysis reports, standards recommendations, template ordinances and contract clauses, and a final project report; this is a services RFQ, not a grant solicitation.