The State of Ohio seeks a vendor to provide Kiteworks file transfer and storage services, accepting proposals for cloud, on-premises, or hybrid solutions. The selected contractor will be responsible for ensuring data security standards are met, including the protection, handling, and confidentiality of contract data through robust policies, procedures, technical and organizational safeguards, and staff training.

Additional responsibilities include implementing and supporting state-approved security procedures such as physical access controls, user ID approval, and incident response action plans. Ongoing compliance monitoring with State IT Security Policies and Standards is required. The contractor must maintain an active information security program addressing risk management, incident response, and prevention of unauthorized data loss or disclosure.

All contract data must be used solely for fulfillment of contract obligations and remain protected against anticipated security threats or hazards. Security incident response and reporting, including attention to generative artificial intelligence risks, are necessary components of the required services.