ESBD_524136_1780667612799_03. Exhibit J.4 - Compliance Standards.pdf

PDF 184 KB Posted

Attached to
Inmate Unit of Assignment Assessment
Solicitation number
IW247306
Issued by
Van Zandt County, Houston City, Texas

About this file

This is an Exhibit J.4 Compliance Standards document for the Texas Department of Criminal Justice-Office of the Chief Information Security Officer (TDCJ-OCISO) related to Solicitation Number IW247306. The document establishes security compliance standards for the Inmate Unit of Assignment Assessment project, requiring the Contractor to maintain all data and deliverables in a secure manner consistent with TDCJ-OCISO and Department objectives. The compliance standard is measured by response time, with the measurement period beginning when a security incident occurs and ending when the Contractor notifies TDCJ-OCISO of the incident.

The acceptable performance standard requires the Contractor to meet 100% of response time requirements as specified in Section C.3.2.C.4. Performance is deemed unacceptable if any data or deliverable fails to maintain consistent security goals with TDCJ-OCISO and the Department, or if any security incident is not reported to TDCJ-OCISO within six hours of discovery. A payment adjustment of 10% deduction from the invoice applies for each late notification. TDCJ-OCISO will document all security incident notifications, including time and date of notification, type of problem, final resolution, and other pertinent information.

View the file

Other files

Show all 11

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Solicitation Number: IW247306 Exhibit J.4

Compliance Standards

Goal To ensure that all data and deliverables for the Inmate Unit of Assignment Assessment are maintained in a secure manner consistent with the goals of the TDCJ–OCISO and the Department.

Strategy A

TDCJ–OCISO will document all notifications of security incidents provided by the Contractor. TDCJ–OCISO personnel will document all relevant security incident information, including but not limited to: time and date of notification, type of problem, final resolution, and any other pertinent information.

Standard The standard will be measured by time. Time begins to accrue when the security incident occurs. Time ceases to accrue when the Contractor has notified the TDCJ– OCISO of the security incident.

Acceptable Meet 100% of response time requirements as stated in Section C.3.2.C.4.

Unacceptable Any data or deliverable that does not maintain consistent security goals with the TDCJ– OCISO and the Department, and/or any security incident that is not reported to the TDCJ–OCISO within six hours of discovery.

Payment Adjustment

10% deduction from invoice per late notification.

File details come from the government source that posted it. Updated .