Response Technical Requirement Security Plan – Specification Mandatory The Bidder must affirm that Bidder has a Security Plan in place for Contract start date that will be utilized to ensure the anonymity of Device User information and that access to such information is controlled and restricted to authorized personnel only, as well as procedures to secure point-of-sale terminals, transactions on the Internet, transaction receipts and sale reports. Provide a description of pre-employment verification procedures, employment agency screening and security awareness training for employees; Provide a list and description of relevant security software, including data encryption; Provide administrative rules relative to security of data. Response VI.2.D.3.C.2. Technical Requirement Fraud Prevention – Mandatory Specification The Bidder must identify the methods used to detect report and prevent fraud, theft, and all other security breaches, including examples of detection reports of unauthorized attempts. Response VI.2.D.3.C.3. Technical Requirement Internal Control Plan – Mandatory
Response Mandatory Technical Requirement – Security Plan Specification The Bidder must affirm that Bidder has a Security Plan in place for Contract start date that will be utilized to ensure the anonymity of Device User information and that access to such information is controlled and restricted to authorized personnel only, as well as procedures to secure point-of-sale terminals, transactions on the Internet, transaction receipts and sale reports. Provide a description of pre-employment verification procedures, employment agency screening and security awareness training for employees; Provide a list and description of relevant security software, including data encryption; Provide administrative rules relative to security of data. Response VI.2.D.3.C.2. Mandatory Technical Requirement – Fraud Prevention Specification The Bidder must identify the methods used to detect report and prevent fraud, theft, and all other security breaches, including examples of detection reports of unauthorized attempts. Response VI.2.D.3.C.3. Mandatory Technical Requirement – Internal Control Plan
22325rfp.docx