IT RFR Required Specifications.doc
DOC document 31 KB Posted
- Solicitation number
- BD-25-1013-RMS00-MITAG-116653
- Issued by
- Massachusetts
About this file
This document is an Information Technology Required Specifications file issued by the Operational Services Division for the Commonwealth of Massachusetts, specifically addressing enterprise information security policies for IT systems and applications operating within the Massachusetts Access to Government Network (MAGNet). The specifications mandate that all IT systems developed by or for Executive department agencies must conform to Enterprise Information Security Policies and Standards established by the Secretary of the Executive Office of Technology Services & Security (EOTSS). Contractors are required to provide advance notice of system design and development initiatives and obtain written permission for any deviations from established security standards.
The document outlines critical compliance requirements, with potential contract breach consequences for non-conforming systems. If a contractor delivers an IT system that does not meet the Commonwealth's security standards, the Commonwealth may require the contractor to re-engineer the system at no additional cost to rectify compliance issues. The specifications emphasize the importance of proactive communication with EOTSS and adherence to evolving information technology security protocols, with a noted sensitivity level classified as "low" for the specified requirements.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| CommonwealthTermsAndConditions.pdf | ||
| EFT_FORM.pdf | ||
| PO 165 RFR - Flood Buyout and Elevation Program.docx | DOCX document | |
| TEMPLATE Environmental Practices Form and Scoring Criteria 2 1 23 (1) (1).xlsx | XLSX spreadsheet | |
| req-specs-Edits0423-final.docx | DOCX document | |
| SDP_Plan_Form (4).xlsx | XLSX spreadsheet | |
| form_prompt-pay-discount.pdf | ||
| instructions-for-vendors-responding-to-bids (4).docx | DOCX document | |
| Attachment 1 - Budget - Chart A and B.xlsx | XLSX spreadsheet | |
| form_contractor-authorized-signatory-listing-for-contractors (1).pdf | ||
| 2 CFR 200.326 (Appendix II).docx | DOCX document | |
| Appendix II to Part 200.docx | DOCX document | |
| SDP_Spending_Report (5).xlsx | XLSX spreadsheet | |
| busreffm (1).docx | DOCX document | |
| form_w-9_UEI.pdf | ||
| Q-A PO165 Bid - BuyOut Program.docx | DOCX document |
Show all 16
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Operational Services Division
RFR - Required Specifications for Information Technology
Revised: July 1, 2020 Information Technology. Required for Information Technology contracts. All IT systems and applications developed by or for Executive department agencies or operating within the Massachusetts Access to Government Network (MAGNet) must conform with the Enterprise Information Security Policies and Standards promulgated by the Secretary of the Executive Office of Technology Services & Security (EOTSS). Non-conforming IT systems may not be deployed unless the purchasing agency and their contractor(s) have jointly applied for and received in writing from the Secretary of EOTSS or the Secretary’s designee, notice that a specified deviation will be permitted. The Enterprise Information Security Policies and Standards are available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards. Additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards may apply and shall be made available to Bidders by the purchasing agency.
Please Note: Given the pace of information technology innovation, purchasing agencies and their contractors are required to contact EOTSS to signal a system or application design and development initiative. Such advance notice helps to ensure conformance with the relevant Enterprise Information Security Policies and Standards.
Contractor delivery of IT systems and applications that fail to conform to the Commonwealth’s Enterprise Information Security Policies and Standards, absent the Secretary of EOTSS’s grant of written permission for a deviation, shall constitute breach of contract. The Commonwealth may choose to require the contractor, at no cost to the Commonwealth, to re-engineer the non-conforming system for the purpose of bringing it into compliance with Commonwealth Enterprise Information Security Policies and Standards.
Sensitivity level - low
File details come from the government source that posted it. Updated .