commbuys.req.specs.IT.7.1.20.docx
DOCX document 17 KB Posted
- Attached to
- DEP-BWR-RFR-2027-Clean Water CWNS
- Solicitation number
- BD-27-1045-BWR00-BWR01-133977
- Issued by
- Massachusetts
About this file
This file contains operational services division required specifications for information technology contracts issued by the Commonwealth of Massachusetts, specifically applicable to executive department agencies and systems operating within the Massachusetts Access to Government Network (MAGNet). The specifications establish mandatory compliance requirements for all IT systems and applications developed by or for state agencies, requiring conformance with the Enterprise Information Security Policies and Standards promulgated by the Secretary of the Executive Office of Technology Services & Security (EOTSS). The document emphasizes that purchasing agencies and their contractors must contact EOTSS in advance to signal any system or application design and development initiatives to ensure alignment with relevant security policies and standards. Non-conforming IT systems cannot be deployed unless the purchasing agency and contractor have jointly obtained written approval from the Secretary of EOTSS or their designee permitting a specified deviation.
The specifications establish strict performance and compliance standards, with contractor failure to deliver systems conforming to the Commonwealth's Enterprise Information Security Policies and Standards constituting a material breach of contract. The Commonwealth reserves the right to require contractors, at no cost to the Commonwealth, to re-engineer non-conforming systems to achieve compliance with enterprise security policies and standards. Additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards may apply and will be made available to bidders by the purchasing agency. The document references the Enterprise Information Security Policies and Standards available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards and is classified with a low sensitivity level, indicating its public availability for bidder reference and compliance.
View the file
Other files
Show all 21
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
OPERATIONAL SERVICES DIVISION
RFR - REQUIRED SPECIFICATIONS FOR INFORMATION TECHNOLOGY
Revised: July 1, 2020
Information Technology. Required for Information Technology contracts. All IT systems and applications developed by or for Executive department agencies or operating within the Massachusetts Access to Government Network (MAGNet) must conform with the Enterprise Information Security Policies and Standards promulgated by the Secretary of the Executive Office of Technology Services & Security (EOTSS). Non-conforming IT systems may not be deployed unless the purchasing agency and their contractor(s) have jointly applied for and received in writing from the Secretary of EOTSS or the Secretary’s designee, notice that a specified deviation will be permitted. The Enterprise Information Security Policies and Standards are available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards. Additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards may apply and shall be made available to Bidders by the purchasing agency.
Please Note: Given the pace of information technology innovation, purchasing agencies and their contractors are required to contact EOTSS to signal a system or application design and development initiative. Such advance notice helps to ensure conformance with the relevant Enterprise Information Security Policies and Standards.
Contractor delivery of IT systems and applications that fail to conform to the Commonwealth’s Enterprise Information Security Policies and Standards, absent the Secretary of EOTSS’s grant of written permission for a deviation, shall constitute breach of contract. The Commonwealth may choose to require the contractor, at no cost to the Commonwealth, to re-engineer the non-conforming system for the purpose of bringing it into compliance with Commonwealth Enterprise Information Security Policies and Standards.
Sensitivity level - low
File details come from the government source that posted it. Updated .