PRF73_PCI_Quote_Form_SOW~1.doc

COMMONWEALTH OF MASSACHUSETTS

PRF73: Payment Data & Payment Card Industry (PCI) Compliance Services

QUOTE FORM AND STATEMENT OF WORK (SOW)

RFR# PRF73DesignatedCTR00 Statewide Contract

Standards for Data Security Compliance are outlined in the Office of the Comptroller Accounts Receivable – Data Security Revenue Collection Policy. Guidance for selection of a Contractor under the PRF73 Statewide Contract is outlined in the Contract User Guide posted on COMMBUYS for Payment Data & Payment Card Industry (PCI) Compliance Services under this Statewide Contract PRF73DesignatedCTR00. This Quote Form is used by all Commonwealth Eligible Entities to obtain quotes and complete a Statement of Work (SOW) engagement under PRF73 for a full suite of compliance audits, quality assurance reviews and testing for Payment Card Industry (PCI) compliance, and compliance reviews of standards, and systems and controls to protect personally identifiable information and other sensitive data.

For purposes of a SOW Quote, Eligible Entities are required to submit this Quote Form by COMMBUYS (Executive Departments must solicit through COMMBUYS) or by email to a minimum of two Contractors authorized for QSA and ASV performance unless one of the Contractors is currently engaged for the same work under prior engagement. Eligible Entities are encouraged to submit quotes to a minimum of two Contractors in a category to obtain the broadest range of performance and competition. Note that Contractors are authorized to provide performance solely in their authorized performance categories as posted under the Statewide Contract User Guide and on www.COMMBUYS.com under PRF73DesignatedCTR00.

Once a Contractor has been selected, the details of the engagement (services to be performed, timeline or schedule of performance completion dates and pricing) should be completed as part of this Quote Form/SOW (and not by separate attachment), executed by authorized signatories. This SOW is not a separate contract but an engagement under the Statewide Contract PRF73DesignatedCTR00 incorporated by reference herein, and serves as the scope of performance and budget for this engagement.

ELIGIBLE ENTITY NAME:

Business Mailing Address:

SOW Contact:

E-Mail Address:

Phone:

Fax:

STATEWIDE CONTRACTOR LEGAL NAME:

Vendor Code: (must be VC from Statewide Contract MA):

MMARS Master Agreement (MA) # (must be used for all encumbrances and payments): MA OSD PRF73DesignatedCTR00 Contract Manager:

Telephone:

Email Address:

PERFORMANCE CATEGORIES:

Check which of the following performance categories are included under this SOW:

___ PCI Council Approved Quality Security Assessors (QSAs) and related QSA Consulting Services.

___ PCI Council Approved Scanning Vendors (ASVs) and related Vulnerability Testing and other Security Compliance Scans and Testing.

CHECK ONE OPTION. IDENTIFY IF THIS IS A QUOTE, NEW ENGAGEMENT OR AN AMENDMENT TO AN EXISTING SOW:

QUOTE for New Engagement

NEW Engagement

AMENDMENT to an existing SOW. Brief Description of Purpose of Amendment:

Find Bid/Contract Documents

To find all contract-specific documents, including the Contract User Guide, RFR, specifications, price sheets and other attachments, visit COMMBUYS.com and search for PRF73 in the “Contract/Blanket description” field to find related Master Blanket Purchase Order (MBPO) information.

IDENTIFY DETAILS OF PERFORMANCE AND PROJECT SCHEDULE (For purposes of a Quote, the Eligible Entity will enter as much information as available for purposes of the quote. This section will be updated once final performance is negotiated.)

Enter Additional Deliverable performance information here: (Enter all Performance details. The Contractor may not add additional Contractor terms). Do not refer to Attachments. All performance details must be inserted as text, tables or diagrams here:

Enter Deliverable Delivery Schedule and Acceptance Criteria for each Deliverable identified above. Do not refer to Attachments. All performance details must be inserted as text, tables or diagrams here:

Timely review and turnaround of deliverables are critical to meeting the project schedule, and all parties agree that they will use best efforts to expedite the review process.

Department approval will not be unreasonably withheld or delayed and should be granted if the deliverable conforms in all material respects to the requirements of the SOW and as negotiated by the parties.

This SOW may not include additional terms and conditions not negotiated as part of the Statewide Contract or require “click through acceptance” of any additional terms not approved in writing by CTR. Any such additional terms shall be considered void or voidable by CTR and the Eligible Entity.

ANTICIPATED SOW START DATE: Obligations under this SOW: (Check one option when SOW is executed. Not required for Quote.)

____ may be incurred as of the Effective Date of the latest Authorizing Signature of this SOW and the parties certify that no obligations have been incurred prior to the Effective Date.

____ may be incurred as of: , 20 , a date LATER than the Effective Date of the Signatures below. No obligations have been incurred prior to the Effective Date.

____ were incurred as of: , 20 , a date EARLIER than the Effective Date of the Signatures below. Any obligations incurred by the Contractor prior to the Effective Date are documented as part of this SOW and are intended to be considered a final Settlement and Release incorporated herein, and upon payment of these obligations, the Contractor forever releases the Commonwealth from any further claims related to these obligations.

CONTRACT END DATE: SOW performance shall terminate as of: , 20 , with no new performance after this date unless the SOW is amended, provided that the terms of this SOW and performance expectations and obligations shall survive its termination for the purpose of resolving any claim, dispute or other SOW action, or for effectuating any negotiated representations and warranties, any close out performance, transition performance to a new Contractor, reporting, invoicing or final payment obligations. SOWs under this Statewide Contract may not be entered into after the termination date of this Statewide Contract.

KEY PERSONNEL ASSIGNED TO THE TASK ORDER AND THEIR ROLES.

The SOW project will be managed by a project team composed of appropriate Eligible Entity stakeholders and the selected Contractor. This team will follow a management program that will stress effective project management and control, which in turn depends upon consistent good communication. Formal project control procedures will include:

· Contractor Reporting of activity and status weekly or as negotiated by the parties.

· Weekly progress reports produced outlining work accomplished during the preceding period and work planned for the succeeding period.

· Timely and accurate identification of any problems encountered by the team and proposed remediation.

· Mandatory written documentation of any potential or actual security vulnerabilities or Data and PCI Compliance issues that are discovered during any Data and PCI Compliance SOW and recommendations for remediation. The Contractor will not disclose any details of performance or the specific vulnerabilities or the type and general scope of remediation recommended (unless authorized by the Eligible Entity).

LIST OF KEY PERSONS ASSIGNED TO THE TASK ORDER AND THEIR ROLES.

Email Address

Project Manager

(include details of day to day responsibilities)

Project Manager

Additional Key Personnel Terms: Key personnel terms are outlined in the Statewide Contract. Additional terms related to key personnel roles and responsibilities:

QUOTE AND BUDGET

The following section outlines the estimated costs for this SOW based upon the requested performance and schedule and pricing is consistent with and does not exceed the fees and costs outlined in the Contractor’s posted pricing in PRF73DesignatedCTR00 on www.COMMBUYS.com . All costs must be included in this budget and performance may not be made if the services/deliverables are not identified below as part of the Contract. The table will expand to accommodate text and descriptions. Insert an alternative table or description of costs here and not by attachment.

$0.00

$0.00

$0.00

$0.00

$0.00

$0.00

$0.00

TOTAL

$0.00

Additional Budget and Costs terms:

PAYMENT TERMS

Pursuant to state finance law and the terms of the contract, payments can not be made under deliverables are received and accepted by the Eligible Entity. The parties may negotiate a payment plan based upon the expected delivery and acceptance of deliverables and the deliverable acceptance criteria identified above. Services capable of being divided into phases of completion that can be independently delivered and accepted may be identified above to enable periodic payments as the phases of delivery and acceptance are completed. The parties should identify Prompt Pay Discounts for early payment of invoices (in less than the standard 45 days) as well as any retainage that will be applied to payments. Payments can not be made in less than 45 days from the receipt of an invoice without a discount.

Retainage. The Eligible Entity will retain ______% on each periodic invoice until full performance is completed under this Contract Statement of Work. See Retainage Policy.

Additional Payment Terms:

STATEMENT OF WORK CHANGE ORDERS

Any additional work that may be required outside the scope of an executed Statement of Work will require the SOW to be updated prior to the start of performance of the additional work. It will be the responsibility of Contractor project manager to maintain work within scope. The project manager will notify the Department if there is any apparent need for additional work outside of this SOW and it will be at the Department’s discretion to accept additional work and issue a change order.

ACCEPTANCE OF TERMS OF STATEMENT OF WORK.

For the purposes of obtaining a quote this SOW does not need to be executed for submission to the Contractors. Once this document is submitted by the Contractors and a Contractor is selected, this SOW will be updated to reflect the final negotiated terms and pricing for this engagement in accordance with the terms of the Statewide Contract. Upon execution of this SOW, the engagement terns are accepted by the authorized signatories of the Eligible Entity and the Contractor as of the latest dates of signatures below.

AUTHORIZING SIGNATURE FOR THE CONTRACTOR:

X: . Date: .

(Signature and Date Must Be Handwritten At Time of Signature)

Print Name: .

Print Title: .

AUTHORIZING SIGNATURE FOR THE DEPARTMENT:

X: . Date: .

(Signature and Date Must Be Handwritten At Time of Signature)

Print Name: .

Print Title: .

Page 1 of 5.

Refer to Contract User Guide for PRF73DesignatedOSC00 for Instructions