IT RFR Required Specifications.doc

DOC document 66 KB Posted

Attached to
27MATALMB1 | Early Literacy Screening Assessments in Grades K-3 | Departmental Master Agreement (MA)
Solicitation number
BD-26-1026-DOE02-DOE01-130126
Issued by
Massachusetts

About this file

This document comprises Information Technology Required Specifications issued by the Executive Office of Technology Services & Security (EOTSS) for the Commonwealth of Massachusetts, applicable to IT contracts where vendors develop or modify software or create deliverables containing intellectual property. All IT systems and applications developed by or for Massachusetts Executive department agencies or operating within the Massachusetts Access to Government Network (MAGNet) must conform to the Enterprise Information Security Policies and Standards established by the Secretary of EOTSS. Non-conforming systems cannot be deployed unless the purchasing agency and contractor jointly obtain written approval from the Secretary of EOTSS or designee authorizing a specified deviation. The purchasing agency must make available to bidders any additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards.

Contractors and purchasing agencies are required to contact EOTSS in advance to signal any system or application design and development initiative to ensure conformance with relevant Enterprise Information Security Policies and Standards. Failure by contractors to deliver IT systems and applications that conform to Commonwealth security policies and standards, absent written deviation permission from the Secretary of EOTSS, constitutes breach of contract. The Commonwealth reserves the right to require contractors, at no cost to the Commonwealth, to re-engineer non-conforming systems to achieve compliance with Enterprise Information Security Policies and Standards. The Enterprise Information Security Policies and Standards are available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards. This specification document became effective July 1, 2020.

View the file

Other files

File Type Posted
27MATALMB1 - Scorecard - Final.docx DOCX document
FY26 State Forms - April 2026~13.pdf PDF
DESE Required Language 10-2025.docx DOCX document
27MATALMB1 - Bid - Final.docx DOCX document
IP Language.docx DOCX document
Attachment B - Contact Form~1.docx DOCX document
27MATALMB1 - Attachment A - FINAL_.docx DOCX document
RFR - Required Specifications from OSD 10.1.21.docx DOCX document
27MATALMB1 - Evidence Form - Final.docx DOCX document

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Please note: These specifications only apply if a vendor will be developing or modifying software or will be developing Deliverables that contain other intellectual property, under this Bid posting Operational Services Division

RFR - Required Specifications for Information Technology

Revised: July 1, 2020 Information Technology. Required for Information Technology contracts. All IT systems and applications developed by or for Executive department agencies or operating within the Massachusetts Access to Government Network (MAGNet) must conform with the Enterprise Information Security Policies and Standards promulgated by the Secretary of the Executive Office of Technology Services & Security (EOTSS). Non-conforming IT systems may not be deployed unless the purchasing agency and their contractor(s) have jointly applied for and received in writing from the Secretary of EOTSS or the Secretary’s designee, notice that a specified deviation will be permitted. The Enterprise Information Security Policies and Standards are available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards. Additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards may apply and shall be made available to Bidders by the purchasing agency.

Please Note: Given the pace of information technology innovation, purchasing agencies and their contractors are required to contact EOTSS to signal a system or application design and development initiative. Such advance notice helps to ensure conformance with the relevant Enterprise Information Security Policies and Standards.

Contractor delivery of IT systems and applications that fail to conform to the Commonwealth’s Enterprise Information Security Policies and Standards, absent the Secretary of EOTSS’s grant of written permission for a deviation, shall constitute breach of contract. The Commonwealth may choose to require the contractor, at no cost to the Commonwealth, to re-engineer the non-conforming system for the purpose of bringing it into compliance with Commonwealth Enterprise Information Security Policies and Standards.

Sensitivity level - low

File details come from the government source that posted it. Updated .