ITES-10995 - USA (New Mexico) - Cyber Third-Party Risk Management Services - Deadline October 16,2026

Vendor needs to provide cyber third–party risk management services to the government authority located in New Mexico.– Design, development and delivery of a scalable, multi–tenant third–party risk management framework program and toolset for entities participating in state grant, including higher education institutions, county governments, local municipalities, and tribal governments (collectively referred to as “local entities”).– Projects include cybersecurity governance and planning, cybersecurity risk assessment, vulnerability and attack surface management, cybersecurity training, and cybersecurity workforce development planning– Reduce systemic supply–chain cybersecurity risk by standardizing how local entities of varying cybersecurity maturity levels discover, tier, assess, contract with, and continuously monitor third–party vendors, resellers, software providers and managed service providers.– Evaluate the extent to which existing legal and contractual provisions support implementation of a mature TPRM program– Develop a recommended baseline of cybersecurity requirements appropriate for vendors supporting local entity operations that align with nationally recognized cybersecurity frameworks– Develop one or more template ordinances that participating entities may adopt to establish legal authority for a TPRM program