ITS78 Data Cybersecurity, and Related Audit, Compliance, and Incident Responses Services Reopening

Background
The Commonwealth of Massachusetts, through the Executive Office for Administration and Finance and the Operational Services Division (OSD), is reopening the ITS78 solicitation for Data, Cybersecurity, and Related Audit, Compliance, and Incident Response Services.
This initiative aims to enhance cybersecurity measures by adding services from PCI Council Approved Quality Security Assessors (QSAs) and Approved Scanning Vendors (ASVs).
The goal is to ensure compliance with security standards and improve incident response capabilities.

Work Details
The contract will include the following services:
- Category 5: PCI Council Approved Quality Security Assessors (QSAs) and related QSA consulting services.
- Category 6: PCI Council Approved Scanning Vendors (ASVs), which will provide vulnerability testing and other security compliance scans.
These services are critical for maintaining data security and ensuring compliance with industry standards.

Period of Performance
The solicitation is anticipated to be posted in April 2026, with an approximate closing date in May 2026.
The exact period of performance will be defined in the solicitation once posted.

Place of Performance
The geographic location for performance is not explicitly stated; however, it is implied that services will be provided within the Commonwealth of Massachusetts.

Bidder Requirements
Bidders must monitor COMMBUYS for updates regarding registration processes and commodity codes relevant to this solicitation.
Specific certifications or requirements have not been detailed in this announcement.