3rd party certifications required for cloud based solutions only.docx

This is a requirements document specifying third-party certifications for cloud-based solutions. The document outlines mandatory independent audit and certification requirements that bidders must satisfy when submitting proposals for cloud-based service offerings. Prospective vendors must demonstrate compliance by providing evidence of at least one of the following certifications: SOC 2 Type II Audit, ISO 27001 Certification, HiTRUST Certification, FedRAMP or GovRAMP authorization, CSA STAR Level 2 or 3 Certification, or CMMC Level 2 or 3 Certification. These certifications must be included with submission materials and serve as qualification criteria for cloud-based solution proposals.

The document does not specify pricing structures, contract terms, award dates, or financial requirements. No information is provided regarding set-asides, incumbent contractors, funding sources, or renewal options. The requirements apply exclusively to cloud-based solutions and represent baseline security and compliance standards that all bidders must meet to be considered responsive to the procurement.