Attachment_5_Conformance_Statements_Deviations_Exceptions_Supplement_1_of_1 (1) - Copy.pdf
PDF 193 KB Posted
- Solicitation number
- BPM005375
- Issued by
- Arizona
About this file
This is a Conformance Statements and Deviations and Exceptions document for Arizona Department of Corrections, Rehabilitation and Reentry (ADCRR) RFP #BPM005375 for Electronic Payment Transaction Processing Services, presented to the Arizona Department of Administration State Procurement Office. The RFP closing date was October 6, 2023. ViaPath Technologies, represented by Payment Specialist Nikki Calhoun, submitted the response document indicating the company's compliance and approach to the requirements outlined in Section 4.5.4.1.5 of the Scope of Services regarding penetration testing and system security protocols.
ViaPath Technologies stated partial compliance with penetration testing requirements, disclosing that the company conducts external penetration testing annually through BugCrowd engagements and performs continuous external testing, as well as annual internal penetration testing. However, ViaPath explicitly noted that it does not allow customers, including ADCRR, to perform penetration testing of its system, which represents a deviation from the RFP requirement that ADCRR may perform penetration testing at any time and that the contractor will promptly resolve identified vulnerabilities.
View the file
Other files
Show 40 more
50 files listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
THE ARIZONA DEPARTMENT OF
CORRECTIONS, REHABILITATION
AND REENTRY
RFP #BPM005375 Electronic Payment Transaction Processing Services
Attachment 5: Conformance Statements and Deviations and Exceptions - Supplement 1 of 1
Closing Date: October 6, 2023
Presented to:
Arizona Department of Administration State Procurement Office 100 N 15th Avenue Phoenix AZ 85007
Presented by:
Nikki Calhoun Payment Specialist Telephone: 602-614-5480 Email: nikki.calhoun@viapath.com or RFP@viapath.com
© 2023 ViaPath Technologies Client Shortened Name RFP # nnnnnnnnn | 2
4.5.4.1.5. Penetration Testing. Describe Offeror’s policies and/or practices regarding its own system penetration testing, as well as its accommodation of, and responsiveness to, penetration testing by ADCRR (ADCRR intends that it may perform penetration testing of Contractor’s system at any time and that Contractor will promptly begin satisfactory resolution following notification by ADCRR of any vulnerabilities found).
ViaPath has read, understands, and partially complies with section 4 Scope of Services, 4.5 Delivery of Services, 4.5.4 Data and Network Access/Security, 4.5.4.1, 4.5.4.1.5.
ViaPath performs external penetration testing both as an annual engagement and continuously using BugCrowd. In addition, internal penetration testing is performed annually. ViaPath does not allow customers to perform penetration testing of our system.
File details come from the government source that posted it. Updated .