Cybersecurity Risk Rating Tool

Summary (Newest Update)

Background Clemson University is seeking proposals for a Cybersecurity Risk Rating Tool to automate the collection and analysis of third-party risk data. The tool aims to enhance the evaluation of prospective vendors, monitor existing third-party partners, and prioritize risk remediation efforts. This initiative aligns with the university's commitment to safeguarding its external-facing assets and ensuring compliance with relevant cybersecurity regulations. Work Details The selected vendor will provide a Cybersecurity Risk Rating Tool that includes functionalities such as: - Automating data collection from external sources - Generating risk-prioritized findings - Categorizing assets by department - Creating action plans based on risk priorities - Providing an interactive knowledge base for findings. The tool must support continuous monitoring of 50 to 100 third-party vendors and allow for the generation of 5-10 reports per month. Additionally, it should include capabilities for sharing findings with third parties, storing evidence artifacts, and executive-level reporting. The vendor must ensure that the solution complies with applicable laws and regulations in higher education. Period of Performance The initial contract term is one year, with automatic renewals for up to four additional one-year periods, contingent upon notice from Clemson University at least 30 days prior to renewal. Place of Performance The services will be performed at Clemson University in South Carolina. Bidder Requirements Offerors must demonstrate experience with similar projects in size and scope, provide references from previous clients (preferably public universities), and submit a detailed technical proposal addressing all requirements outlined in the solicitation. Additionally, they must comply with insurance requirements and provide evidence of required certifications or licenses.