When is the submission deadline?

Submissions are due September 30, 2026.

It was issued by Ecm-Health, Inc..

Who is a good fit for this opportunity?

Licensed or accredited SOC 2 examination and assurance firm. Experience conducting SOC 2+ Type I examinations for web applications. Expertise in serverless cloud environments and cloud security controls. Experience supporting government entities and maintaining control crosswalks.

RFP HunterNever miss another opportunity you should have won.

Book a demo

See More RFPs

SOC 2+ Type I Web Application Examination Audit Services

Book a demo

Overview

Cybersecurity & Data Privacy

Posted: September 16, 2026Deadline: September 30, 2026

Settle Signals

Market intelligence for public sector sales teams

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

Learn more about Settle

SUMMARY

A Tennessee government authority seeks an independent SOC 2+ Type I examination of a web application. The engagement includes maintaining the Master Crosswalk and tailoring audit artifacts to a serverless cloud environment.

KEY REQUIREMENTS

Must be a qualified CPA firm or a firm utilizing a legally affiliated CPA entity
Must be capable of issuing an official SOC 2 Type I opinion
Must demonstrate expertise in AWS cloud serverless environments (AWS, Laravel Vapor, GitHub)
Must demonstrate experience with unified framework mapping involving NIST SP 800-171 Rev 3 and HIPAA
Must provide a fixed-fee quote
Must maintain professional liability / errors and omissions (E&O) insurance coverage
Must execute a mutual non-disclosure agreement
Must provide a Master Crosswalk on Day 1 of the engagement

TIMELINE

RFP Posted: September 15th, 2026

Proposal Responses Due: September 30th, 2026

Firm Selection & Notification: October 4th, 2026

Procurement Complete: October 16th, 2026

Audit Commencement / Kickoff: October 19th, 2026

Fieldwork Completion: November 20th, 2026

Final Report Issuance: December 21st, 2026

CONTACTS

Primary procurement contact — name, title, email, and phone

Additional decision-makers and their departments

See Decision-Maker Contacts

Issuing Agency

Ecm-Health, Inc.

Organization overview and procurement intelligence available on paid plans.

See Issuer Research

DESCRIPTION

A government authority in Tennessee is seeking vendor services to conduct an independent SOC 2+ Type I examination of a web application.

The selected vendor will retain the integrity of the Master Crosswalk and tailor examination responsibilities and supporting artifacts to the authority's serverless cloud environment.

Similar RFPs

Frequently asked questions

When is the submission deadline?: Submissions are due September 30, 2026.
Who issued this RFP?: It was issued by Ecm-Health, Inc..
Who is a good fit for this opportunity?: Licensed or accredited SOC 2 examination and assurance firm
Experience conducting SOC 2+ Type I examinations for web applications
Expertise in serverless cloud environments and cloud security controls
Experience supporting government entities and maintaining control crosswalks

Analysis generated by Settle AI from the source RFP.

RFP Hunter shows what is open. Settle shows what is forming.

Settle pieces together buyer signals, budgets, contract activity, and the sources your team already monitors. See why an opportunity fits and what to do before the RFP posts.

See how Settle works