6-A05 TX-Ramp 1003.pdf

PDF 165 KB Posted

Attached to
AI Governance and Monitoring Platform
Solicitation number
745-26-P33
Issued by
Bexar County, Texas

About this file

This document is a TX-RAMP Notification Appendix issued by the University of Texas Health Science Center at San Antonio (UTHSCSA) Department of Purchasing for the AI Governance and Monitoring Platform RFP. The notification informs proposers that their submissions may require TX-RAMP (Texas Risk and Authorization Management Program) Certification in accordance with Senate Bill 475 of the 87th Legislative Session and Texas Government Code 2054.0593. The RFP seeks a comprehensive AI governance and monitoring platform with associated services to establish centralized oversight, risk classification, policy enforcement, performance monitoring, lifecycle management, and audit readiness across all AI use cases at UTHSCSA. The platform must support healthcare and higher education regulatory environments including HIPAA, FERPA, FDA considerations, state privacy laws, and emerging AI regulations. UTHSCSA does not guarantee any specific volume, minimum, or maximum compensation under the RFP or resulting contract.

Proposers must select from four options regarding TX-RAMP Certification: submit proof of existing certification, confirm that the submission is not a cloud computing service and therefore does not require TX-RAMP Certification, indicate that the TX-RAMP Certification process has been initiated with DIR, or submit FedRamp Certification along with a commitment to complete TX-RAMP Certification. The Texas Department of Information Resources (DIR) established the TX-RAMP framework to provide standardized security assessment, authorization, and continuous monitoring of cloud computing services that process state agency data. Additional information regarding the TX-RAMP program and vendor certification process is available through DIR's website, and an Assessment Request can be submitted online through DIR's portal.

View the file

Other files

File Type Posted
12-A02 - Sample Agreement 745-26-P33.docx DOCX document
3-A01D Addenda Checklist 0725.pdf PDF
7-A03 VETHUB 0126.pdf PDF
2-A04 - Risk Assessment 0128.xlsx XLSX spreadsheet
4-A01B Exec of Offer 0126.pdf PDF
1-A06 PDAA.xlsx XLSX spreadsheet
5-S06 Pricing and Delivery Schedule 0725.pdf PDF
11-S04 Terms Conditions 0226.pdf PDF
14-01 RFP 745-26-P33 AI Governance and Monitoring Platform.pdf PDF
10-A07 - BAA.docx DOCX document
8-A07 - AI Platform Requirements.xlsx XLSX spreadsheet
9-A01C Gen Quest 0226.pdf PDF
13-A01A General info 0922.pdf PDF
Show all 13

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

APPENDIX FIVE

TX-RAMP NOTIFICATION

It has been determined that the RFP you are submitting a proposal for could require TX- Ramp Certification Level . As required in Senate Bill 475 of the 87th Legislative Session the Texas Department of Information Resources (DIR) must establish a state risk and authorization management program that provides “a standardized approach for security assessment, authorization, and continuous monitoring of cloud computing services that process the data of a state agency.”

To comply, DIR has established a framework for collecting information about cloud services security posture and assessing responses for compliance with required controls and documentation. Texas Government Code 2054.0593 mandates that state agencies, as defined by Texas Government Code 2054.003(13) must only enter or renew contract to receive cloud computing services that comply with TX-RAMP requirements.

A TX-RAMP Assessment Request can be requested online.

11.2024

Additional details regarding the TX-RAMP program and vendor certification process can be found via DIR

Please select from the items listed and complete if required

Proposer’s TX-RAMP Certification - Level is attached. _ _

YES NO N/A

Proposer’s submission is NOT a “cloud computing service” as defined in Texas Government Code § 2054.0593(a), therefore TX-RAMP Certification is not required. _ _

Proposer HAS started the TX-RAMP Certification Level process and submitted the required information to DIR on , 20

DEPARTMENT OF PURCHASING | HUB PROGRAMS | Mail Code 7962 | 7703 Floyd Curl Drive | San Antonio, Texas 78229-3900

210.562.6200 | www.uthscsa.edu | https://wp.uthscsa.edu/purchasing/ https://capitol.texas.gov/tlodocs/87R/billtext/html/SB00475S.htm https://statutes.capitol.texas.gov/Docs/GV/htm/GV.2054.htm#2054.0593 https://statutes.capitol.texas.gov/sotwdocs/gv/htm/gv.2054.htm#2054.003 https://dir.texas.gov/information-security/tx-ramp-request https://dir.texas.gov/information-security/texas-risk-and-authorization-management-program-tx-ramp https://statutes.capitol.texas.gov/SOTWDocs/GV/htm/GV.2054.htm https://statutes.capitol.texas.gov/SOTWDocs/GV/htm/GV.2054.htm http://www.uthscsa.edu/ https://wp.uthscsa.edu/purchasing/

Proposer currently has FedRamp Certification and will submit with their TX- RAMP submission to DIR (TX-Ramp Certification is still required).

YES NO N/A

Respectfully submitted by

Name of Proposer

Authorized Signature

Email Address

APPENDIX FIVE
Please select from the items listed and complete if required
required information to DIR on:
20:
YES:
NO_2:
NA:
Name of Proposer:
Email Address:
Ramp Certification Level: II
Check Box1: Off
Check Box2: Off
Check Box3: Off
Check Box4: Off
Text1: AI Governance and Monitoring Platform
Text2: 745-26-P33

File details come from the government source that posted it. Updated .