RFB-IS-2720125 Information Security & Privacy Exhibit Summary

This Information Security & Privacy Exhibit is a supporting document for California's RFB-IS-2720125 solicitation for Veeam software licenses. The exhibit establishes the security and privacy requirements and standards that bidders and the selected vendor must comply with throughout the contract term. The document outlines mandatory information security controls, data protection protocols, and privacy safeguards required for the management and handling of state data and systems. Specific requirements address encryption standards, access controls, incident response procedures, vulnerability management, audit logging, and compliance with applicable state and federal information security regulations and frameworks.

The exhibit functions as a binding specification that vendors must meet to qualify for award and maintain compliance during contract performance. All bidders are required to acknowledge acceptance of these information security and privacy requirements as part of their proposal submission. The exhibit ensures that Veeam software implementations and related services maintain the security posture and data protection standards necessary to safeguard California's critical systems and sensitive information throughout the contract period.