Incident Response & Digital Forensic Services

The University of Iowa seeks a qualified vendor to provide a retainer‑based Incident Response (IR) and Digital Forensic Services (DFS) program for its academic, research, and health‑care environments. The supplier will maintain a ~200‑hour annual retainer, respond to Critical and High severity cyber incidents within 4 hours, and deliver comprehensive forensic analysis, evidence handling, and post‑incident reporting. Services cover ransomware, data‑breach investigations, cloud (Azure, AWS, Microsoft 365) forensics, endpoint (Windows, Linux, macOS) forensics, email and mobile device investigations, and coordination with legal, insurance, and law‑enforcement entities. The contract is initially one year with up to four optional one‑year extensions (maximum five years). • Retainer of ~200 hours with on‑demand advisory and remote consultation • 4‑hour initial response SLA for Critical/High severity incidents • Full forensic capabilities across on‑premise, cloud, and mobile platforms • Required certifications: ECIH, GCIH (or equivalent) for personnel • Deliverables include incident action plans, forensic reports, executive briefings, and remediation road‑maps • Must comply with HIPAA, FERPA, and other federal regulations; data must remain within the United States