Executive Office of Technology Services and Security

The buyer seeks to establish Master Service Agreements with vendors to create Incident Response Plans and conduct Tabletop Exercises for State Agencies. The goal is to improve cybersecurity posture across the Commonwealth by preparing agencies to respond to cybersecurity incidents. Vendors may offer services for Incident Response Planning, Tabletop Exercises, or both. Preference will be given to vendors who can provide both services.

• 1/9/2025 - Bidder Questions Due
• 1/13/2025 - Commonwealth Responses posted to COMMBUYS
• 1/23/2025 - Proposal Due Date
• 1/31/2025 - Notice of Apparent Successful Bidder(s) posted

• Create Incident Response Plans for State Agencies
• Conduct Tabletop Exercises to test Incident Response Plans
• Provide necessary training of staff
• Review IRP with State Agencies' Legal Department
• Connect State Agency to appropriate intelligence sharing organization
• Develop incident staffing and stakeholder plan
• Investigate potential compromises
• Assign appropriate staff to IRP Roles
• Create TTX scenarios for State Agencies
• Produce 'Lessons Learned' documents after TTX exercises