IT RFR Required Specifications.doc

DOC document 63 KB Posted

Attached to
25MASSSMS1 | Support School, District, and DESE Sustainable Improvement Efforts | Departmental MA
Solicitation number
BD-25-1026-DOE02-DOE01-112189
Issued by
Middlesex County, Massachusetts

About this file

This is an IT RFR Required Specifications document issued by the Massachusetts Operational Services Division and the Executive Office of Technology Services & Security (EOTSS). The document outlines mandatory specifications for IT systems and applications developed for or operating within the Massachusetts Access to Government Network (MAGNet). All IT systems must conform to Enterprise Information Security Policies and Standards, with any deviations requiring written approval from the EOTSS Secretary or designee.

Contractors must notify EOTSS before beginning system or application design and development initiatives to ensure compliance with security standards. Non-conforming deliveries constitute a breach of contract, and the Commonwealth may require contractors to re-engineer non-compliant systems at no additional cost. The document notes that additional policies and standards may apply beyond the core Enterprise Information Security requirements, which must be provided to bidders by the purchasing agency. The sensitivity level of this document is classified as low.

View the file

Other files

File Type Posted
25MASSSMS1 - Organization Info - Attachment B - Final.docx DOCX document
Appendix C - Service Matrix - Final.xlsx XLSX spreadsheet
RFR - Required Specifications from OSD 10.1.21.docx DOCX document
25MASSSMS1 - Appendix B - Final.docx DOCX document
25MASSSMS1 - Bid - Final.docx DOCX document
25MASSSMS1 - Attachment A - final.docx DOCX document
25MASSSMS1 - Scorecard - Part A - FINAL.docx DOCX document
25MASSSMS1 - Appendix A - Final.docx DOCX document
Prompt Pay Discount - PPD Form.docx DOCX document
25MASSSMS1 - Sample Deliverables Based Budget - Final.docx DOCX document
Supplier Diversity Plan Language.docx DOCX document
DESE Required Language 3-26-24.docx DOCX document
State Forms - Read Only - UPDATED Dec 2024.pdf PDF
25MASSSMS1 Scoreacard - Part A and B - Final.docx DOCX document
IP Language.docx DOCX document
Supplier Diversity Program Plan Form.xlsx XLSX spreadsheet
Show all 16

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Please note: These specifications only apply if a vendor will be developing or modifying software or will be developing Deliverables that contain other intellectual property, under this Bid posting Operational Services Division

RFR - Required Specifications for Information Technology

Revised: July 1, 2020 Information Technology. Required for Information Technology contracts. All IT systems and applications developed by or for Executive department agencies or operating within the Massachusetts Access to Government Network (MAGNet) must conform with the Enterprise Information Security Policies and Standards promulgated by the Secretary of the Executive Office of Technology Services & Security (EOTSS). Non-conforming IT systems may not be deployed unless the purchasing agency and their contractor(s) have jointly applied for and received in writing from the Secretary of EOTSS or the Secretary’s designee, notice that a specified deviation will be permitted. The Enterprise Information Security Policies and Standards are available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards. Additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards may apply and shall be made available to Bidders by the purchasing agency.

Please Note: Given the pace of information technology innovation, purchasing agencies and their contractors are required to contact EOTSS to signal a system or application design and development initiative. Such advance notice helps to ensure conformance with the relevant Enterprise Information Security Policies and Standards.

Contractor delivery of IT systems and applications that fail to conform to the Commonwealth’s Enterprise Information Security Policies and Standards, absent the Secretary of EOTSS’s grant of written permission for a deviation, shall constitute breach of contract. The Commonwealth may choose to require the contractor, at no cost to the Commonwealth, to re-engineer the non-conforming system for the purpose of bringing it into compliance with Commonwealth Enterprise Information Security Policies and Standards.

Sensitivity level - low

File details come from the government source that posted it. Updated .