Exhibit C 8.0 Scanning Form Fill.pdf
PDF 103 KB Posted
- Attached to
- Medicaid Dental Adjudication and Admin Services
- Solicitation number
- 25RFP12174
- Issued by
- Harding County, South Dakota
About this file
This is a scanning acknowledgment form (Exhibit C) from the South Dakota Division of Medical Services related to their RFP for Medicaid Dental Adjudication and Administrative Services. The document outlines the State's requirement to conduct a security and vulnerability scan of the offeror's non-production environment using commercially available, industry standard tools at mutually agreeable times, though it explicitly states this will not include penetration testing. The form requires offerors to provide contact information for their security representative and obtain authorization from an employee with appropriate authority to allow the State to conduct the security scan.
The document specifies that failure to complete and sign this form may result in the RFP response being dropped from consideration, particularly when State data protected by federal/state law, regulation, or industry standard is involved. The State will accept full scan reports from industry standard Web Application Vulnerability scanning tools (such as Invicti, Burp Suite, Nmap, Qualys, Nessus) as satisfying the requirement, but explicitly states that Executive Summaries, penetration test methodology reports, vulnerability summaries, and SOC I/SOC II reports are not sufficient replacements. The State will sign a non-disclosure agreement if required before conducting the scan or receiving the security assessment.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Exhibit B Security and Vendor Questionnaire.docx | DOCX document | |
| RFP Document.pdf | ||
| Response to Offeror Questions document.pdf | ||
| Exhibit A ITSP.pdf | ||
| Exhibit A.1 ITSP Agreement.pdf | ||
| Exhibit A ITSP.pdf | ||
| RFP Document.pdf | ||
| Exhibit B Security and Vendor Questionnaire.docx | DOCX document | |
| Exhibit C 8.0 Scanning Form Fill.pdf | ||
| Exhibit A.1 ITSP Agreement.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
8.0 SCANNING
The offeror acknowledges that the State will conduct a security and vulnerability scan as part of the review of the offeror’s RFP. This scan will not include a penetration test. The State will use commercially available, industry standard tools to scan a non-production environment with non-production data at mutually agreeable times.
The offeror should fill in the information below and sign the form. The offeror’s employee signing this form must have the authority to allow the State to do a security scan. If no security contact is given the State will assume that the State can scan at any time. At the state’s option, any RFP response that does not include a completed and signed form may be dropped from consideration. If there is State data protected by federal or state law or regulation or industry standard involved, the State is more likely to consider a security scan necessary for an RFP to be considered. Except for State staff, the State will only provide scan information to the offeror’s security contact. At the State’s option, the State will conduct the scan at a location named by the offeror. The offeror can only request, not require, naming the scanning location. The State may consider a full scan report from industry standard Web Application Vulnerability scanning tools (ex. Invicti, Burp Suite, Nmap, Qualys, Nessus, etc...) as satisfying the scanning requirement.
Executive Summaries, penetration test methodology/vulnerability summary reports, and SOC I/SOC II are not considered as sufficient replacements for a vulnerability scan. If required, the State will sign a non-disclosure agreement before scanning or receiving the full security assessment.
Offeror’s name: _______________________
Offeror’s security contact’s name: _______________________
Security contact’s phone number: _______________________
Security contact’s email address: _______________________
Web address URL or Product Name _____________________ (The State will contact the security contact to arrange for a test log for scanning)
Offeror’s employee acknowledging the right to scan:
Name (Print): ___________________________
Title:
Date:
Signature:
EXHIBIT C
| Offerors name: |
| Offerors security contacts name: |
| Security contacts phone number: |
| Security contacts email address: |
| Web address URL or Product Name: |
| Name Print: |
| Title: |
| Date: |
File details come from the government source that posted it. Updated .