Executive Office of Technology Services and Security

The buyer is seeking vendors to establish Master Service Agreements to provide Incident Response Plans and Tabletop Exercises for state agencies. The goal is to improve cybersecurity posture across the Commonwealth by equipping agencies with appropriate plans to respond to cybersecurity incidents. Vendors will create IRPs, conduct TTXs, provide training, and develop staffing plans. The buyer prefers vendors who can provide both IRPs and TTXs.

• 1/9/2025 - Bidder Questions Due
• 1/13/2025 - Commonwealth Responses Posted
• 1/23/2025 - Proposal Due Date
• 1/31/2025 - Notice of Apparent Successful Bidder(s)

• Create Incident Response Plans (IRPs) for state agencies
• Conduct Tabletop Exercises (TTXs) to test IRPs
• Provide necessary training of staff on IRPs
• Develop incident staffing and stakeholder plans
• Assign appropriate staff to IRP roles
• Create TTX scenarios for state agencies
• Run TTX scenarios to test agency IRPs
• Create 'Lessons Learned' documents from TTXs