4-A05 TX-Ramp 1003.pdf

PDF 159 KB Posted

Attached to
Zero-Balance Audit and Payment Compliance Review Services
Solicitation number
RFP 745-26-P12
Issued by
Bexar County, Texas

About this file

This is an Appendix Five notification document from the University of Texas Health Science Center at San Antonio (UTHSA) Department of Purchasing regarding TX-RAMP Certification requirements for vendors submitting proposals for Zero-Balance Audit and Payment Compliance Review Services. The document informs proposers that their submission may require TX-RAMP Certification Level compliance in accordance with Senate Bill 475 of the 87th Legislative Session and Texas Government Code 2054.0593, which mandate that state agencies only enter or renew contracts for cloud computing services that comply with TX-RAMP requirements. Proposers are required to select and complete one of four certification options: submit proof of existing TX-RAMP Certification Level, declare that the submission is not a cloud computing service and therefore TX-RAMP Certification is not required, indicate that the proposer has started the TX-RAMP Certification Level process and provide the submission date to DIR, or provide FedRamp Certification along with their TX-RAMP submission to DIR.

The document serves as a compliance checklist and attestation form for proposers responding to UTHSA's RFP for zero-balance audit services. Proposers must complete the form by providing their company name, authorized signature, email address, TX-RAMP Certification Level (if applicable), and selecting the appropriate checkbox corresponding to their certification status. Additional information regarding the TX-RAMP program and vendor certification process is available through the Texas Department of Information Resources (DIR) at their official website and online assessment request portal. The form was effective as of November 2024 and should be submitted as part of the proposer's overall response package.

View the file

Other files

File Type Posted
5-A01D Addenda Checklist 0725.pdf PDF
11-A01A General info 0922.pdf PDF
14-Question Clarification 1.pdf PDF
8-S06 Pricing and Delivery Schedule 0725.pdf PDF
1-A04 - Risk Assessment 0128.xlsx XLSX spreadsheet
3-A07 - BAA.docx DOCX document
13-01 RFP 745-26-P12.pdf PDF
10-S04 Terms Conditions 0226.pdf PDF
2-A06 PDAA.xlsx XLSX spreadsheet
7-A01C Gen Quest 0725.pdf PDF
6-A01B Exec of Offer 0126.pdf PDF
12-A02 - SA 745-26-P12.docx DOCX document
9-A03 VETHUB 0126.pdf PDF
Show all 13

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

APPENDIX FIVE

TX-RAMP NOTIFICATION

It has been determined that the RFP you are submitting a proposal for could require TX- Ramp Certification Level . As required in Senate Bill 475 of the 87th Legislative Session the Texas Department of Information Resources (DIR) must establish a state risk and authorization management program that provides “a standardized approach for security assessment, authorization, and continuous monitoring of cloud computing services that process the data of a state agency.”

To comply, DIR has established a framework for collecting information about cloud services security posture and assessing responses for compliance with required controls and documentation. Texas Government Code 2054.0593 mandates that state agencies, as defined by Texas Government Code 2054.003(13) must only enter or renew contract to receive cloud computing services that comply with TX-RAMP requirements.

A TX-RAMP Assessment Request can be requested online.

11.2024

Additional details regarding the TX-RAMP program and vendor certification process can be found via DIR

Please select from the items listed and complete if required

Proposer’s TX-RAMP Certification - Level is attached. _ _

YES NO N/A

Proposer’s submission is NOT a “cloud computing service” as defined in Texas Government Code § 2054.0593(a), therefore TX-RAMP Certification is not required. _ _

Proposer HAS started the TX-RAMP Certification Level process and submitted the required information to DIR on , 20

DEPARTMENT OF PURCHASING | HUB PROGRAMS | Mail Code 7962 | 7703 Floyd Curl Drive | San Antonio, Texas 78229-3900

210.562.6200 | www.uthscsa.edu | https://wp.uthscsa.edu/purchasing/ https://capitol.texas.gov/tlodocs/87R/billtext/html/SB00475S.htm https://statutes.capitol.texas.gov/Docs/GV/htm/GV.2054.htm#2054.0593 https://statutes.capitol.texas.gov/sotwdocs/gv/htm/gv.2054.htm#2054.003 https://dir.texas.gov/information-security/tx-ramp-request https://dir.texas.gov/information-security/texas-risk-and-authorization-management-program-tx-ramp https://statutes.capitol.texas.gov/SOTWDocs/GV/htm/GV.2054.htm https://statutes.capitol.texas.gov/SOTWDocs/GV/htm/GV.2054.htm http://www.uthscsa.edu/ https://wp.uthscsa.edu/purchasing/

Proposer currently has FedRamp Certification and will submit with their TX- RAMP submission to DIR (TX-Ramp Certification is still required).

YES NO N/A

Respectfully submitted by

Name of Proposer

Authorized Signature

Email Address

APPENDIX FIVE
Please select from the items listed and complete if required
required information to DIR on:
20:
YES:
NO_2:
NA:
Name of Proposer:
Email Address:
Ramp Certification Level: II
Check Box1: Off
Check Box2: Off
Check Box3: Off
Check Box4: Off
Text1: Zero Balance Audit & Payment Compliance Services
Text2: 745-26-P12

File details come from the government source that posted it. Updated .