The Commonwealth of Massachusetts Operational Services Division intends to reopen ITS78: Data, Cybersecurity, and Related Audit, Compliance, and Incident Response Services to add Category 5: PCI Council Approved Quality Security Assessors (QSAs) and Related QSA Consulting Services, and Category 6: PCI Council Approved Scanning Vendors (ASVs) including Vulnerability Testing and Other Security Compliance Scans and Testing. The solicitation will be posted in April 2026 with an approximate closing date of May 2026. The services required include data cybersecurity, audit, compliance, and incident response services. Interested bidders can monitor COMMBUYS for amendments to this announcement and for the complete solicitation posting. • The solicitation is for the provision of data cybersecurity, audit, compliance, and incident response services. • The services will be provided through COMMBUYS. • The solicitation will be posted in April 2026 with an approximate closing date of May 2026. • Interested bidders can monitor COMMBUYS for amendments to this announcement and for the complete solicitation posting. • The Operational Services Division will provide educational opportunities on the bidding process through relevant links. • Bidders can register for COMMBUYS email notifications to track any amendments to this announcement and know when the solicitation is posted and available.