RFP 65-22 Attachment C MBTA Privacy and Security Policy.pdf

This document is the MBTA Privacy and Security Policy, which is an attachment to RFP 65-22 for Storage Tank Environmental Compliance Services. The MBTA is soliciting qualified vendors to provide system-wide Storage Tank Environmental Compliance Services. The RFP has a State Local Contract Opportunity ID of 66ab1e9824b406932d02482d and is for the state of Massachusetts. The policy outlines the MBTA's requirements for protecting the privacy and security of information related to the storage tank environmental compliance services.

The policy covers a range of topics including data classification, access controls, monitoring and auditing, incident response, and breach notification procedures. It also addresses physical security, personnel security, and third-party contractor requirements. The policy is intended to ensure the confidentiality, integrity, and availability of information related to the storage tank environmental compliance services.