- Security Control Assessment Assignment and Delegation

The Ohio Department of Administrative Services (DAS) has established an Indefinite Delivery Vehicle (IDV) for Security Control Assessment services, specifically focused on the Ohio Benefits Program. The contract, identified as DBDAS-24-06-005, enables the procurement of comprehensive IT security services including annual security assessments, penetration testing, system security documentation reviews, and detailed security and privacy assessment reports. The scope covers multiple system components such as Ohio Benefits, Electronic Document Management System (EDMS), and Interactive Voice Response (IVR) systems, following Centers for Medicare & Medicaid Services (CMS) MARS-E 2.0 guidelines.

Bulletproof Solutions, Inc. has been awarded the prime contract with a total contract value of $202,752, effective from September 12, 2024, through December 31, 2026. The contract is a competitive selection vehicle covering the State of Ohio, with services to be delivered under the UNSPSC Code 81110000 for computer services. The contract is structured with potential renewal options subject to satisfactory performance and state needs, and will be managed by a team of security experts led by Gus Fritschie as Program Manager and Phillip Young as Project Manager, with hourly rates ranging from $190 to $194 across different professional roles.