3-Attachment 14 Prereq Assessment of AZ Baseline Infrastructure Security Controls- BPM006719_AMI EX.docx
DOCX document 36 KB Posted
- Attached to
- Master Agreement AZ|CTR077085
- Contract number
- CTR077085
- Issued by
- Arizona
About this file
This document is a Request for Proposal (RFP) Solicitation No. BPM006719 for Statewide Emergency Response Services and Solutions, issued by the Arizona Department of Administration State Procurement Office. The solicitation involves a prerequisite assessment by the Arizona Department of Homeland Security (AZDOHS) Cyber Command, which requires potential contractors to complete an AZRAMP Level 1 Prerequisite Control Sheet based on NIST SP 800-53 Revision 5 security standards. The document specifically references AMI Expeditionary Healthcare, LLC as a responding vendor.
The solicitation seeks emergency medical services providers, with a mandatory requirement for vendors to demonstrate compliance with infrastructure security controls. AMI Expeditionary Healthcare, LLC indicates their core service is providing emergency medical services personnel and support, and they commit to completing security prerequisites within 45 days of award if applicable to medical personnel. The assessment process involves evaluating submitted control sheets for completeness, security control understanding, and potential impact on contract award eligibility, with results to be used internally by the procurement and homeland security agencies.
View the file
Other files
Show all 21
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Request for Proposal
Solicitation No. BPM006719
Statewide Emergency Response Services and Solutions Arizona Department of Administration State Procurement Office
Attachment 14 – Prerequisite Assessment of Arizona Baseline Infrastructure Security Controls To be susceptible for award of Contracts for services that will require Contractor to handle Data provided by State, Offerors are required to complete the AZRAMP Level 1 Prerequisite Control Sheet provided below and submit as Attachment 14 - Prerequisite Assessment as part of the Offer.
Arizona Department of Homeland Security (AZDOHS) Cyber Command has established a NIST SP 800-53 Revision 5 based process to assess risk associated with storing, processing, and transmitting State of Arizona Data with Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS) vendors.
The State Data Classification Policy (8110) and a Confidentiality, Integrity, Availability (CIA) model are used to determine which level of assessment to administer for the vendor’s Infrastructure / IaaS. A Microsoft Excel spreadsheet is currently used for each level of assessment.
The solicitation requires the Offeror to complete the AZRAMP Level 1 Prerequisite Control Sheet, which can be found at:
· https://azdohs.gov/sites/default/files/azramp-level-1-prerequisite-control-sheet_0.xlsx
· Contractor is required to provide any requested documentation including System Security Plan (SSP), policies, and procedures supporting the review of the assessment.
AZDOHS Cyber Command will evaluate and rank submitted AZRAMP Level 1 Prerequisite Control Sheets for completeness, attention to detail, and understanding of NIST security controls and framework. AZDOHS Cyber Command will forward assessment results and recommendations to the Procurement Officer. Results of these IT security control reviews are for internal use only and will not be shared with responding bidders, but may impact the Offeror’s susceptibility for award.
All Offerors must complete the assessment above, and upload with their Offers as Attachment 14 - Prerequisite Assessment. This task is a mandatory requirement for an Offeror to be susceptible for award.
AMI Expeditionary Healthcare, LLC Response:
AMI's core service is the provision of emergency medical services, encompassing both medical personnel and support. We do not offer IT infrastructure for the program. As a company, we adhere to strict internal Standard Operating Procedures (SOPs) and will comply with the AZRAMP level 1 security requirements for all AZ programs. In accordance with attachment 13, if applicable to medical personnel as determined by the State, we will complete the prerequisite within 45 days of the award.
Solicitation Attachment – Prerequisite Assessment of Arizona Baseline Infrastructure Security Controls | Revision No. 2 | Revised 09-24 image1.jpg
File details come from the government source that posted it. Updated .