Project will result in the design, development and delivery of a scalable, multi-tenant Third-Party Risk Management framework. Please send all quotes to: Melissa.Gutierrez@cyber.nm.gov
15 September 2026
Cyber Third-Party Risk Management
Project will result in the design, development and delivery of a scalable, multi-tenant Third-Party Risk Management
framework. Please send all quotes to: Melissa.Gutierrez@cyber.nm.gov
15 September 2026
Released 9/15/2026, 10:00 AM MDT Type Courtesy Posting
Open 9/15/2026, 1:00 PM MDT Number OCS2026.01
Close 10/16/2026, 5:00 PM MDT Currency US Dollar
Sealed Until 10/16/2026, 5:00 PM MDT
15 September 2026
Contacts
James Ortega
james.ortega@gsd.nm.gov
15 September 2026
Commodity Codes
Commodity Code Description
96149 Legal Services, Attorneys
96258 Professional Services (Not Otherwise Classified)
15 September 202615 September 202615 September 202615 September 2026
The New Mexico Office of Cybersecurity is in the planning stage of a project that will result in the design,
development and delivery of a scalable, multi-tenant Third-Party Risk Management (TPRM) framework,
program and toolset for entities participating in New Mexico’s SLCGP grant, including Higher Education
Institutions, County Governments, Local Municipalities, and Tribal Governments (collectively referred to as
“local entities”). The ultimate objective is to reduce systemic supply-chain cybersecurity risk by standardizing
how local entities of varying cybersecurity maturity levels discover, tier, assess, contract with, and continuously
monitor third-party vendors, resellers, software providers and managed service providers.
Description
Buyer Attachments
The New Mexico Office of Cybersecurity is in the planning stage of a project that will result in the design, development and delivery of a scalable, multi-tenant Third-Party Risk Management (TPRM) framework, program and toolset for entities participating in New Mexico’s SLCGP grant, including Higher Education Institutions, County Governments, Local Municipalities, and Tribal Governments. The ultimate objective is to reduce systemic supply-chain cybersecurity risk by standardizing how local entities of varying cybersecurity maturity levels discover, tier, assess, contract with, and continuously monitor third-party vendors, resellers, software providers and managed service providers.
We post new it & software opportunities in New Mexico as agencies publish them. Get them in one email — free, and unsubscribe whenever.
Most New Mexico work asks for the two below, and the solicitation documents are where it’s stated. Here’s what each costs through Light RFP if you need one.
Source: State of New Mexico (ePro) (solicitation 1444484), retrieved via the New Mexico ePro SciQuest procurement portal. View the official posting, and always confirm requirements and deadlines with the issuing agency.