ITES-11001 - USA (Colorado) - Digital Security and Content Risk Review Service - Deadline October 5,2026

Vendor needs to provide digital security and content risk review service. – Conduct a non–invasive assessment of the website and relevant third–party systems connected to the site.– The review should consider, as appropriate:• Website security settings, user access, and permissions• Forms, uploads, and publicly accessible files• Third–party integrations such as membership, registration, payment, email marketing, and analytics systems• Legacy or migrated content• Search indexing and public discoverability• Personally identifiable information and other potentially sensitive information• Information that could create privacy, security, cultural, or reputational risks if publicly Accessible– Conduct an independent review of the live website from the perspective of an outside party who may not have context or intentions.– The review should consider potential risks such as:• Content that could be misunderstood or taken out of context• Information that could be misrepresented or republished• Content that may be easily scraped or aggregated• Information that could allow someone to infer sensitive Tribal, environmental, or organizational information• Potential cultural, environmental, privacy, or reputational concerns