Cybersecurity Awareness and Compliance Training Solution

Summary (Newest Update)

Background Oakland University, established in 1957 and located in Rochester, Michigan, is a state-supported institution recognized as a doctoral research university. The University aims to provide a comprehensive educational experience and has partnered with various organizations for enhanced learning opportunities. The Technological Services Department (UTS) is seeking proposals for a new cybersecurity awareness and compliance training solution to replace the existing SANS training program. This initiative aims to enhance the cybersecurity knowledge of students, faculty, and staff through tailored training and robust analytics. Work Details The selected vendor will provide a cloud-based cybersecurity awareness training platform that includes: 1. A library of training modules covering topics such as phishing, passwords, social engineering, data protection, and privacy tailored for higher education environments. 2. Role-specific content for students that reflects campus life scenarios. 3. Delivery of training to three primary populations: students, staff, and faculty with audience segmentation capabilities. 4. Simulated phishing campaigns to measure susceptibility to social engineering attacks. 5. Automated enrollment and tracking of training completion based on group membership. 6. Self-service support portal for users to access assigned courses and training history. 7. Integration with the University’s identity management systems for single sign-on capabilities. 8. Regularly updated content addressing emerging threats and compliance requirements under FERPA, HIPAA, GLBA, PCI DSS, and CMMC. 9. Robust reporting tools for tracking KPIs related to training effectiveness. Period of Performance The contract period will commence upon award with readiness for service expected by June 13, 2026. Place of Performance Services will be performed at Oakland University in Rochester, Michigan. Bidder Requirements Vendors must demonstrate experience in providing similar services in higher education settings and must comply with insurance requirements including: - Workers’ Comp & Employer’s Liability ($1M per occurrence) - Commercial General Liability ($1M per occurrence) - Errors & Omissions ($1M per occurrence) - Cyber Risk Liability ($2M per occurrence) - Auto Liability ($1M) - Excess (Umbrella) Insurance ($2M). Additionally, vendors must provide evidence of insurance prior to contract execution.