IT RFR Required Specifications.doc
DOC document 66 KB Posted
- Solicitation number
- BD-26-1026-DOE02-DOE01-130333
- Issued by
- Massachusetts
About this file
This is an Information Technology Required Specifications document issued by the Massachusetts Executive Office of Technology Services & Security (EOTSS) for IT contracts under the state's procurement framework. The specifications apply to vendors developing or modifying software or creating deliverables containing intellectual property for Executive department agencies or systems operating on the Massachusetts Access to Government Network (MAGNet). All IT systems and applications must conform to the Enterprise Information Security Policies and Standards established by EOTSS, with purchasing agencies and contractors required to contact EOTSS in advance to signal system or application design and development initiatives. Non-conforming systems cannot be deployed without written approval from the Secretary of EOTSS or their designee granting permission for specified deviations.
Contractor failure to deliver IT systems and applications in compliance with Commonwealth Enterprise Information Security Policies and Standards, absent written permission for deviation, constitutes a breach of contract. The Commonwealth reserves the right to require contractors, at no cost to the Commonwealth, to re-engineer non-conforming systems to achieve compliance with the established security standards. The Enterprise Information Security Policies and Standards are available to all bidders through the referenced EOTSS website, and vendors must ensure alignment with these requirements as well as any additional agency-specific policies that do not conflict with the enterprise standards.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| FY26 State Forms - April 2026.pdf | ||
| 27TALLM1 - Scorecard - final.docx | DOCX document | |
| Supplier Diversity Plan Language.docx | DOCX document | |
| IP Language.docx | DOCX document | |
| Supplier Diversity Program Plan Form.xlsx | XLSX spreadsheet | |
| 27TALLM1 - Bid - Final.docx | DOCX document | |
| DESE Required Language 10-2025.docx | DOCX document | |
| Prompt Pay Discount - PPD Form.docx | DOCX document | |
| Attachment B - Contact Form~1.docx | DOCX document | |
| 27TALLM1 - Measures - final~1.docx | DOCX document | |
| 27TALLM1 - Deliverables-based budget - HQIM CoP - final.docx | DOCX document | |
| RFR - Required Specifications from OSD 10.1.21.docx | DOCX document | |
| 27TALLM1 - Attachment A - Final.docx | DOCX document |
Show all 13
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Please note: These specifications only apply if a vendor will be developing or modifying software or will be developing Deliverables that contain other intellectual property, under this Bid posting Operational Services Division
RFR - Required Specifications for Information Technology
Revised: July 1, 2020 Information Technology. Required for Information Technology contracts. All IT systems and applications developed by or for Executive department agencies or operating within the Massachusetts Access to Government Network (MAGNet) must conform with the Enterprise Information Security Policies and Standards promulgated by the Secretary of the Executive Office of Technology Services & Security (EOTSS). Non-conforming IT systems may not be deployed unless the purchasing agency and their contractor(s) have jointly applied for and received in writing from the Secretary of EOTSS or the Secretary’s designee, notice that a specified deviation will be permitted. The Enterprise Information Security Policies and Standards are available at https://www.mass.gov/handbook/enterprise-information-security-policies-and-standards. Additional policies, standards, and requirements that do not conflict with the Enterprise Information Security Policies and Standards may apply and shall be made available to Bidders by the purchasing agency.
Please Note: Given the pace of information technology innovation, purchasing agencies and their contractors are required to contact EOTSS to signal a system or application design and development initiative. Such advance notice helps to ensure conformance with the relevant Enterprise Information Security Policies and Standards.
Contractor delivery of IT systems and applications that fail to conform to the Commonwealth’s Enterprise Information Security Policies and Standards, absent the Secretary of EOTSS’s grant of written permission for a deviation, shall constitute breach of contract. The Commonwealth may choose to require the contractor, at no cost to the Commonwealth, to re-engineer the non-conforming system for the purpose of bringing it into compliance with Commonwealth Enterprise Information Security Policies and Standards.
Sensitivity level - low
File details come from the government source that posted it. Updated .