Executive Summary
Objective
Corporation for Supportive Housing (CSH) seeks proposals from qualified independent third-party firms to:
- Validate cybersecurity posture across the enterprise environment
- Assess and rationalize system integrations and systems of record
Outcome We Need
- Independent, evidence-based assessment of cybersecurity posture and key control gaps
- Clear current-state view of systems of record, integrations, and data flows
- Prioritized recommendations to strengthen security, integration maturity, and data governance
- Practical roadmap to support near-term action and longer-term improvement
Critical Principle
CSH seeks to preserve independence and objectivity between assessment and implementation. Any potential implementation role by the selected vendor or an affiliated entity must be disclosed, reviewed, and approved by CSH with appropriate conflict mitigation safeguards.
Organizational Context
CSH is a national non-profit that functions both as a technical assistance provider in the supportive housing field and as a Community Development Financial Institution (CDFI) that provides loan products to supportive and affordable housing developments across the country. CSH operates a multi-system environment across HR, finance, loan administration, CRM, training, communications, and analytics (42 systems identified to date in the CSH Software Systems inventory). Listing of systems will be available upon execution of CSH RFP NDA.
Examples include:
- HRIS (e.g., Paycom)
- Contract and signature tools (e.g., DocuSign)
- Financial and operational platforms (e.g., NetSuite)
- Loan management (TEA)
- Collaboration tools (Microsoft ecosystem, Zoom)
- Data and reporting platforms
This environment requires improvement: - Visibility into current security posture
- Clarity on systems of record and integrations
- Stronger data integrity and accountability practices