AutoCAD Subscription Renewal Services

Seeking vendors for renewal of AutoCAD software subscriptions to maintain ongoing access and licensing compliance.

Comply with State IT Security Policies and Standards and these Terms.
Accept all security and privacy requirements outlined in these Terms.
Maintain information security in Contractor-managed environments.
Comply with NIST SP 800-53 moderate level baseline.
Be consistent with Federal Information Security Management Act (FISMA 2014) requirements.
Offer customizable and extendable capability based on open-standards APIs.
Maintain an Information Security Program (ISP) with policies, procedures, safeguards, and training.
Protect State Data against unauthorized loss, destruction, alteration, access, or disclosure.
Use due diligence to secure computer and telecommunications systems involved with State Data.
Assume all State Data is confidential and critical for State operations.
Maintain confidentiality of State Data obtained from the State.
Use State Data solely to perform obligations under the Contract.
Do not sell, rent, lease, or disclose State Data to any third party, except as permitted.
Establish and maintain physical, technical, and administrative safeguards for State Data.
Apply appropriate risk management techniques based on data sensitivity.
Ensure internal security policies address confidentiality, integrity, and availability of State Data.
All State Data at rest must reside within the contiguous United States with a minimum of two data center facilities at two different and distant geographic locations.
Provide additional documentation (e.g., PIA, FIPS-199, SSP, POA&M) if handling Sensitive Data.
Give access to State Data only to authorized personnel who need to know.
Cooperate with State monitoring of compliance.
Promptly destroy or return all State Data upon completion or termination of the Contract.
Maintain appropriate and effective business continuity and disaster recovery plans.
Maintain a privacy policy that includes processes for obtaining individual privacy consent for PII and responding to access, correction, and deletion requests.
Scan all source code for vulnerabilities before and after changes.
Promptly remediate all vulnerabilities and provide patches at no cost.
Follow Open Source Foundation for Application Security (OWASP) top 10 best practices for application code review.
Warrant that software and/or service are free from defects, viruses, malware, and other harmful code.
Notify the State within 24 hours of any order or request to disclose State Data.
Cooperate with the State's efforts to obtain a protective order.
Disclose only the legally required part of information if compelled, after consulting with the State.
Obtain an annual audit (AICPA SSAE No. 18, SOC 1 Type 2 and SOC 2 Type 2) at Contractor's expense.
Provide audit results to the State within 30 days of receipt.
Immediately remedy any issues identified in audits at no cost to the State.
Cooperate with the State's independent Security and Data Protection Audit.
Ensure Contractor personnel with access to State Data undergo background investigations.
Prohibit personnel with certain criminal convictions (dishonesty, breach of trust, money laundering, felony) or OFAC designation from performing certain services.
Ensure personnel with access to Federal Tax Information (FTI) or Criminal Justice Information (CJI) complete required background investigations.
Be responsible for Security Incident response, including containment, eradication, and recovery.
Report Security Incidents in writing to the State within 24 hours of becoming aware.
Provide follow-up reports for Security Incidents within five business days and updates until investigation is complete.
Comply with all applicable laws requiring notification of individuals in a Security Incident.
Reimburse the State for notification costs and credit monitoring services resulting from a Contractor's Security Incident.
Preserve sufficient evidence for Security Incident investigation.
Establish a Security Incident reporting communications procedure with the customer State agency.
Cooperate with the State's independent investigation of Security Incidents.
Maintain robust security capability when accessing State network systems and data.
Ensure State Data is secure before transferring control of any systems or media.
Permit State Data on portable computing devices or media only if adequate security measures are in place.
Encrypt State Data when stored on portable devices/media or transmitted across networks.
Maintain an accurate inventory of portable devices authorized for use with State Data.
Report lost or stolen portable computing devices to the State.
Comply with HIPAA data handling and privacy requirements if handling health or medical data.
Comply with 42 C.F.R. Part 2 if handling client identifying information.
Comply with IRS Publication 1075 safeguards if handling Federal Tax Information (FTI).
Ensure all computer systems receiving, processing, storing, or transmitting FTI meet IRS Publication 1075 requirements.
Perform all work involving FTI under the supervision of the contractor.
Ensure FTI authorized officers or employees meet background check requirements defined in IRS Publication 1075.
Maintain a list of officers or employees authorized access to FTI.
Use FTI only for the purpose of carrying out the contract provisions.
Account for FTI upon receipt and properly store it.
Certify that FTI processed will be completely purged from all physical and electronic data storage or safeguarded.
Provide spoilage or intermediate hard copy printouts of FTI to the agency or destroy and certify destruction.
Ensure all security features are available and activated to protect FTI systems.
Do not subcontract work involving FTI without prior written approval of the IRS.
Include FTI safeguards in any approved subcontract.
Develop, document, disseminate, and update audit and accountability policies for FTI systems.
Archive audit information for seven years for FTI.
Protect FTI audit information and tools from unauthorized access, modification, and deletion.
Notify FTI personnel in writing of criminal/civil sanctions for unauthorized disclosure.
Certify and annually recertify FTI personnel's understanding of security policy and procedures.
Comply with National Crime Information Center (NCIC) Operating Manual, Criminal Justice Information Services (CJIS) Security Policy, and 28 CFR Part 20 if handling Criminal Justice Information (CJI).
Require employees/subcontractors performing work with CJI to complete and submit the FBI CJIS Security Addendum.

The corrected renewal dates for the AutoCAD LT subscription are June 28th, 2026 – June 27th, 2027.

Ohio Department Of Developmental Disabilities

Organization overview and procurement intelligence available on paid plans.

The selected vendor will be responsible for providing AutoCAD subscription renewal services. This encompasses ensuring continued, uninterrupted access to AutoCAD software for the client and adhering to all licensing requirements.

Vendors are required to submit any questions related to this RFP no later than March 20, 2026. All services must align with the relevant technical standards and support structures as outlined by the AutoCAD provider.

AutoCAD Subscription Renewal Services

Overview

Fit Score

SUMMARY

KEY REQUIREMENTS

BUDGET

CONTRACT DURATION

TIMELINE

Issuing Agency

DESCRIPTION

Similar RFPs