Internal Audit Government Bids & RFPs

This bid solicitation is issued by the Department of the Treasury, Division of Purchase and Property, on behalf of the Department of Treasury, Division of Pensions and Benefits. The purpose is to solicit quotes for medical and pharmacy claims reviewer, data management, and technical services. Bidders must submit pricing using the state-supplied price sheet. The contract term is for five years with a possible two-year extension. The quote opening date has been extended to February 18, 2026. The state reserves the right to reject any or all quotes. The state will invoke reciprocal action against out-of-state bidders with preference practices. The state may enter into negotiations with one or multiple bidders. The state may request a revision of the bidders quote within njstart. The state reserves the right to inspect the bidders establishment before making an award. The state may also consult with clients of the bidder during the evaluation of quotes. The state owns all deliverables developed for the state in the course of providing services under the contract. The contractor shall indemnify, defend, and save harmless the state and its officers, agents, servants and employees, from and against any and all third party claims. The contractor shall carry errors and omissions, professional liability insurance, and/or professional liability malpractice insurance. The contractor shall carry cyber breach insurance. The contractors liability for actual, direct damages resulting from the contractors performance or nonperformance of, or in any manner related to, the contract for any and all third party claims, shall be limited in the aggregate to 200 of the fees paid by the state during the previous 12 months to contractor for the products or services giving rise to such damages. The contractor shall establish and maintain a framework to provide assurance that information security strategies are aligned with and support the states business objectives. The contractor shall establish security requirements and ensure appropriate mechanisms are provided for the control, administration, and tracking of access to, and the use of, the contractors information systems that contain or could be used to access state data. The contractor shall establish administrative, technical, and physical security controls required to effectively manage the risks introduced by mobile devices used for organizational business purposes. The contractor shall establish security requirements that govern the use of private, public, and hybrid cloud environments to ensure risks associated with a potential loss of confidentiality, integrity, availability, and privacy are managed. The contractor shall establish controls required to ensure change is managed effectively. The contractor shall implement processes and controls to ensure that information assets are properly maintained, thereby minimizing the risks from emerging information security threats and/or the potential loss of confidentiality, integrity, or availability due to system failures. The contractor shall implement proactive vulnerability identification, remediation, and patch management practices to minimize the risk of a loss of confidentiality, integrity, and availability of information system, networks, components, and applications. The contractor shall implement continuous monitoring practices to establish and maintain situational awareness regarding potential threats to the confidentiality, integrity, availability, privacy and safety of information and information systems through timely collection and review of securityrelated event logs. The contractor shall establish security requirements necessary to ensure that systems and application software programs developed by the contractor or thirdparties e. g. vendors, contractors, etc. perform as intended to maintain information confidentiality, integrity, and availability, and the privacy and safety of individuals. The contractor shall ensure that controls nec