County of Los Angeles

Buyer seeks to establish information security and privacy requirements for contractors handling County Information. The exhibit outlines obligations for information security, data protection, privacy, and compliance with applicable laws. Contractor must implement comprehensive security measures, encryption protocols, and regular audits to safeguard County Information. The requirements include incident response procedures and business continuity planning.

• 4/24/2025 - Proposal Due Date

• Maintain company-wide Information Security Program
• Establish and maintain Privacy Program for safeguarding information
• Conduct background investigations on contractor employees
• Encrypt all workstations and portable devices storing County Information
• Implement secure authentication and access control protocols
• Maintain physical and environmental security controls
• Develop business continuity and disaster recovery plans
• Monitor and manage information processing facilities
• Conduct regular security and privacy audits
• Secure cyber liability insurance with minimum $10M coverage