15-Appendix K.pdf
PDF 114 KB Posted
- Attached to
- Animal Shelter Software/Application
- Solicitation number
- BCZ26 - 00028908
- Issued by
- Dallas County, Texas
About this file
This document is Appendix K of the City of Dallas's request for proposals for Animal Shelter Software/Application, establishing requirements for audit and compliance evaluation as a key component of the City's vendor selection process. Proposers must provide comprehensive audit and compliance documentation across multiple security and operational frameworks, including System Organization Controls (SOC)-2 Type II, Statement on Auditing Standards (SAS)-70 Type II, FISMA compliance, ISO 27001 certification, and multiple NIST standards covering contingency planning, risk management, security controls, workforce frameworks, and IT testing. Additional compliance documentation must address industry-specific standards including PCI DSS for payment card security, HIPAA for health information protection, CJIS for criminal justice information systems, FedRAMP for cloud-based information protection, and COPPA for children's online privacy protection.
The audit and compliance documentation serves as a critical evaluation criterion in the City's assessment of proposed solutions and must be submitted with sufficient detail to demonstrate the proposer's security posture and operational controls. This requirement applies to the five-year Indefinite Delivery/Indefinite Quantity service agreement for animal shelter software and application services. Proposers should provide as much information as possible across all listed compliance areas to strengthen their proposal evaluation within the City of Dallas's selection process.
View the file
Other files
Show all 21
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Appendix K - Audit/Compliance Requirement
Audit/Compliance Requirement
Audit and Compliance is a key component in the City’s evaluation and selection process for proposed solutions. The Proposer is expected to provide audit/compliance details as it pertains pertaining to the following areas (provide as much information as possible):
Audit and Compliance is a key component in the City’s evaluation and selection process for proposed solution(s). The proposer is expected to provide audit/compliance details as pertains to the following areas (provide as much information as possible):
• System Organization Controls (SOC)-2 Type II
• Statement on Auditing Standards (SAS) -70 Type II
• FISMA (Federal Information Security Modernization Act of 2014)
• ISO® 27001
• NIST Standard 800 -034r1 Contingency Planning
• NIST Standard 800-37r2 Risk Management
• NIST Standard 800-39 Security Risk
• NIST Standard 800 -050 Security Awareness and Training
• NIST Standard 800 -053r4 Security and Privacy Controls
• NIST Standard 800 -084 IT Testing, Training, and Exercises
• NIST Standard 800-181 Cybersecurity Workforce Framework http://www.isaca.org/Knowledge-Center/Standards/Documents/IT-Audit- Assurance-Guidance-1March2010.pdf https://www.ready.gov/business/implementation/IT
• PCI DSS – Payment Card Industry Data Security Standard
• HIPAA – Health Insurance Portability and Accountability Act
• CJIS – Criminal Justice Information System
• FedRAMP – Protection of information in the cloud
• COPPA – Children’s Online Privacy Protection Rule
Appendix K - Audit/Compliance Requirement
File details come from the government source that posted it. Updated .