IT & Data Security Compliance Support

The contract requires the implementation and ongoing maintenance of secure IT systems that adhere strictly to Massachusetts General Laws Chapter 93H, the Payment Card Industry Data Security Standard, and Executive Office of Technology Services and Security policies, specifically for the handling of personal and payment card data. The work must ensure continuous compliance with these regulatory frameworks, focusing on data protection, risk mitigation, and secure system architecture throughout the lifecycle of the services provided. The subcontractor will be responsible for securing sensitive information, conducting necessary audits, and responding to evolving security threats while maintaining alignment with state and industry mandates. Performance is expected to occur primarily in Boston, Massachusetts, with the work tied to the Department of Administrative Offices under agency code DAO01. The solicitation was posted on July 14, 2026, and responses are due by March 1, 2027. The contract falls under NAICS code 541512, indicating it involves computer systems design and related services. There is no specified set-aside status, and the subcontractor must be prepared to meet rigorous compliance obligations without the benefit of detailed point-of-contact information or additional geographic specification beyond the place of performance.