Prism compliance management system

The Maryland State Highway Administration is soliciting proposals under PORFP BPM059327 for the PRISM Compliance Management System, a cloud-based software subscription with installation, training, and maintenance, due November 3, 2026 at 2:00 PM EDT. The procurement is designated a Small Business Reserve (SBR) award, limiting eligibility to certified small business vendors that meet Maryland's statutory requirements. It is also limited to Master Contractors under COTS 2012 Master Contract 060B2490021, and bidders must be authorized resellers for Early Morning Software, Inc. Current Master Contractors may submit a Letter of Authorization with their bid. Questions closed October 26, 2026.

The scope covers three functional areas. FA I is COTS SaaS subscription modules, including branded portal management, vendor search, procurement and bid tracking, contract and PO management, subcontractor management, spend management, prompt payment, compliance reporting, performance scorecards, workforce management, single sign-on, and data exchange. FA III is manufacturer's software maintenance. FA II is installation and training, priced as three fixed-price milestones (Design, Deploy, Closeout), capped at 49% of PORFP value and not purchasable alone. The project follows ten deliverables, all subject to State acceptance. Required technical standards include 99.0% minimum monthly availability for Core Applications, disaster recovery within 24 hours with a one-hour recovery point objective tested annually, FIPS 140-3 encryption, multi-factor authentication integrated with the State's Identity Provider, and annual SOC 2 Type II reports. State Data must remain within the United States. The contractor must notify the State within 24 hours of any security incident. The attached Data Use Agreement covers personal information, including sensitive categories such as racial or ethnic origin, consumer health data, and genetic information, under Maryland's PIGA provisions.

The contract term is two years, with Year 2 payment subject to the availability of funds under Master Contract 14. The State intends to award the full term to one Master Contractor. Year 1 invoicing occurs within 30 days after the Subscription Start Date. Place of performance is the State Highway Administration offices at 707 N. Calvert Street, Baltimore, Maryland 21202. Bid pricing must remain valid for at least 90 days after the due date.