7-IT Vendor Controls and Cybersecurity Acknowledgement.pdf

This is an IT Vendor Controls and Cybersecurity Acknowledgement document for Harris County Public Health Services in Texas, establishing vendor requirements and compliance obligations for the Class D Pharmacy Inventory Management Program (CDP-IMP). The acknowledgement establishes cybersecurity standards and vendor controls that must be implemented by the selected contractor to manage pharmacy inventory systems and related data for Harris County Public Health Services. The document outlines mandatory security protocols, vulnerability management, access controls, and incident reporting procedures that the vendor must maintain throughout the contract term beginning approximately July 1, 2026. Vendors are required to acknowledge their understanding and commitment to these cybersecurity requirements, which serve as conditions of contract award and continued performance.

The cybersecurity acknowledgement specifies technical and administrative safeguards that vendors must implement, including encryption standards, multi-factor authentication, regular security assessments, employee training requirements, and audit logging capabilities. Vendors must also establish procedures for timely notification of security breaches, maintain business continuity and disaster recovery plans, and comply with all applicable state and federal data protection regulations. The document requires vendors to provide evidence of compliance with these controls prior to contract execution and maintain ongoing certification throughout the contract period. Failure to meet these cybersecurity requirements or acknowledge these obligations may result in contract termination or vendor disqualification.