RFQ 27-05002 for Tenable Enterprise Platform

This solicitation, designated RFQ 27-05002, issued by the Massachusetts Executive Office of Technology Services and Security, seeks bids from ITS86-qualified vendors for the procurement of the Tenable Enterprise Platform. The contract requires compliance with a range of state and federal data security and privacy regulations including HIPAA, CJIS, IRS Publication 1075, PCI standards, FERPA, and the Massachusetts General Laws governing data protection. Contractors must ensure proper handling of sensitive data, including personally identifiable information, protected health information, and criminal justice information, with mandatory employee background checks and certifications such as CJIS compliance where applicable. The contract operates under a Master Services Agreement structure with specific Statements of Work detailing deliverables, tasks, and performance metrics. Deliverables are subject to inspection and acceptance by the Agency’s Project Manager at the Agency’s location, with acceptance decisions rendered within ten business days of submission. Key contractual requirements include strict adherence to the Commonwealth’s information security policies, mandatory designation and approval of key personnel, and execution of appropriate data management and confidentiality agreements. Invoicing is conducted electronically via email with detailed reporting of resource usage and deliverables, and contractor personnel must meet specific clearance and certification criteria prior to data access. The contract does not specify pricing details or a clear award methodology, and formal evaluation factors are not provided. Proposal submissions must be made exclusively through the COMMBUYS portal by the specified deadline, including editable MS Word versions of all required attachments such as license and warranty agreements. The contract does not address physical packaging, shipping terms, or organizational conflict of interest provisions explicitly, but emphasizes compliance with information security, data handling, and confidentiality standards throughout the contract term and beyond.