What the buyer needs
AI summaryThe buyer needs a vendor to provide the FocalPoint web-based record information search platform. This web-based platform must enable authorized users to access multiple criminal justice data sources through a centralized user interface with automation capabilities. Eligible bidders are limited to onshore USA organizations. Performance of the work will be offsite, and the buyer is currently looking for proposals. All questions must be submitted no later than November 27, 2026.
Scope of work
- FocalPoint web-based record information search platform
- Centralized user interface for multiple criminal justice data sources
- Compliance with Judiciary and EOTSS Enterprise Information Security Policies
- Microsoft Entra sync via SCIM provisioning and SSO integration
- Integration with Splunk and CrowdStrike Falcon monitoring tools
- Encryption of all data in transit and at rest
- Data redundancy, geographic failover, and disaster recovery plans
- Annual cybersecurity awareness training for staff and contractors
Minimum qualifications
- Onshore (USA Organization Only) with US-based data centers
- Compliance with CIS Controls v8+, NIST 800-53/800-171, NIST CSF, or MITRE ATT&CK
- FedRAMP Moderate or higher compliance, or equivalent state-level certifications
- Cloud providers must hold documented SOC 2 Type II and ISO 27001 certifications
- Incident detection and response procedures aligned with NIST SP 800-61 Rev. 3
- Compliance with M.G.L. c. 93H, M.G.L. c. 66A, and HIPAA
Documents to include with your response
- Information demonstrating compliance with EOTSS Enterprise Information Security Policies
- Documentation on data redundancy, geographic failover, and disaster recovery plans
- Details on past or ongoing security incidents or breaches within the last five (5) years
- Specification of how encryption keys are generated, stored, and rotated