Specifications include, but are not limited to: Proposal Option 1: A Statement of Work (SOW) To Cover All EOPSS Agencies • On-site Interviews with EOPSS inter-agencies to validate Application Assets against EOPSS Asset Inventory List • Interviews to identify inter-agency policies, standards, and procedures • Identify policy, standards, and procedure gaps and vulnerabilities between EOPSS; its inter-agencies privacy and information security policies and make recommendations • Identify policy, standards, and procedure gaps and vulnerabilities between EOPSS, its inter-agencies privacy and information security policies when compared to industry best practices [NIST SP800-53r5; CJIS Security Control Frameworks] and the Enterprise Information Security policies, standard and procedures as mandated by EOTSS and make recommendations. • EOPSS inter-agencies include: Department of Criminal Justice and Information Services Department of Correction Department of Fire Services Executive Office of Public Safety and Security Massachusetts Emergency Management Agency Massachusetts State Police Massachusetts State Police Crime Laboratory Municipal Police Training Committee Office of the Chief Medical Examiner Parole Board Sex Offender Registry Board State 911 Proposal Option 2: A SOW To Cover Two EOPPS Agencies • On-site Interviews with two (2) EOPSS inter-agencies to validate Application Assets against EOPSS Asset Inventory List • Identify policies, standards, and procedures of two (2) EOPSS inter-agencies • Identify policy, standards, and procedure gaps and vulnerabilities between EOPSS; its two (2) inter-agencies privacy and information security policies and make recommendations • Identify policy, standards, and procedure gaps and vulnerabilities between EOPSS, its two (2) inter-agencies privacy and information security policies when compared to industry best practices [NIST SP800-53r5; CJIS Security Control Frameworks] and the Enterprise Information Security policies, standard and procedures as mandated by EOTSS and make recommendation • The two (2) EOPSS agencies to be assessed are the Massachusetts State Police Crime Laboratory and the Office of the Chief Medical Examiner
