Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
State IT tells board it will require stronger vendor security, move to GovRamp
Summary
A North Carolina Department of Information Technology representative told the New Hanover board the state is increasing third‑party vendor monitoring (BitSight, SOC 2, penetration testing) and will transition vendors to GovRamp for continuous assurance, with an expected rollout and vendor guidance in early 2026.
A representative from the North Carolina Department of Information Technology briefed the board on stepped‑up third‑party vendor due diligence and a planned move toward GovRamp continuous monitoring for state vendors.
The NCDIT speaker described new practices the state is using: continuous vendor ratings (BitSight), requesting SOC 2 Type…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat

