Attachment D - Security Addendum 2026.pdf

This is a Security Addendum document for an Integrated Library System (ILS) procurement by Houston Public Library (HPL) in Texas. The addendum establishes security requirements and protocols that vendors must comply with as part of their proposal and contract execution for the cloud-hosted ILS solution, which includes a Discovery Layer, Mobile Application, software licensing, cloud hosting, implementation, configuration, data migration, staff training, technical support, and maintenance services. The document specifies the security standards, data protection measures, and compliance obligations that the selected vendor must meet throughout the contract term to ensure the protection of library patron data, staff information, and system integrity.

The Security Addendum outlines the technical and operational security requirements that are mandatory for contract award and ongoing performance. These requirements typically include provisions for data encryption, access controls, system vulnerability management, incident response procedures, and regular security audits or assessments. Vendors must demonstrate their capability to meet or exceed these security standards as a condition of contract award, and ongoing compliance with the security requirements is a material obligation throughout the contract period and any renewal options.