Specifications include, but are not limited to: The Commonwealth of Massachusetts and the Data and Cybersecurity Strategic Sourcing Team (SST) are soliciting Bidders for the acquisition of services pertaining to data and cybersecurity, excluding PCI-related services. Services shall include a full range of audit, penetration tests, reviews, and validation of compliance with legal, regulatory and policy requirements, and related services in areas such as data breach investigation, remediation, and security of confidential information. The resulting Contract will serve as the primary Statewide Contract used by Executive Agencies of the Commonwealth for the goods and services covered by the Contract. This procurement will replace those services currently offered under PRF56 that are not available under PRF73. The Contract will also be available for use by other Eligible Entities.
