Supplement A:
State IT Policy, Standard and Service Requirements
Revision History:
Date:
1/01/2019
10/18/2019
12/15/2020
5/13/2021
7/19/2021
02/07/2022
05/03/2022
07/10/2024
Description of Change:
Original Version
Updated to modify service descriptions, include new services, and remove
older services. A new Appendix A - Request for Variance to State IT Policy,
Standard or Service Requirements was added.
Updated to align with current service offerings, to incorporate the Cloud
Smart strategy, and to clarify the variance request requirements.
Updated to align with current Infrastructure as a Service (IaaS) Frameworks
service offering.
Updated to modify service descriptions, include new services, and remove
older services.
Updated Section 4.1. State IT Cloud Smart Strategy to clarify the scope,
intent, and requirements of the service. Also, reorganized the public and
private cloud information.
Updated Section 4.3.6 ePayment Business Solutions audit standard.
Modified Section 3. State IT Policy and Standard Requirements to remove
the references to State of Ohio IT Bulletins and revise hyperlinks.
Updated the format, structure, and terminology to reflect current practices.
Modified the services to align with current offerings.
State of Ohio Department of Administrative Services / Office of Information Technology
Supplement A: State IT Policy, Standard and Service Requirements P a g e | 1
Contents
1. Contractor Identification and Supplement Definitions .....................................................................................................3
2. Overview of Supplement and Requirements .....................................................................................................................3
3. Proposed Variances to Supplement Requirements ..........................................................................................................4
4. State and DAS IT Policies and Standards..........................................................................................................................4
5. State IT Services ..................................................................................................................................................................5
5.1. State IT Cloud Smart Strategy ............................................................................................................................................5
5.1.1. Public Cloud Brokerage Service ................................................................................................................................................... 6
5.1.2. Private Cloud Data Center Services.............................................................................................................................................. 9
5.2. InnovateOhio Platform (IOP) ............................................................................................................................................. 12
5.2.1. IOP Identity Service Offerings for Ohioans and Workforce....................................................................................................... 12
5.2.2. IOP User Experience Service Offerings ...................................................................................................................................... 12
5.2.3. IOP Web Forms ............................................................................................................................................................................ 12
5.2.4. IOP Data and Analytics Products ................................................................................................................................................ 12
5.3. Enterprise Application Services ....................................................................................................................................... 15
5.3.1. Artificial Intelligence Capabilities ............................................................................................................................................... 15
5.3.2. Enterprise Hosted Document Management................................................................................................................................ 15
5.3.3. Electronic Data Interchange (EDI) Application Integration........................................................................................................ 16
5.3.4. eLicense Ohio Professional Licensure ....................................................................................................................................... 16
5.3.5. ePayment Business Solutions .................................................................................................................................................... 16
5.3.6. Enterprise eSignature Service..................................................................................................................................................... 17
5.3.7. IT Service Management Tool (ServiceNow) ................................................................................................................................ 17
5.3.8. Automated Ticketing.................................................................................................................................................................... 17
5.3.9. Ohio Benefits................................................................................................................................................................................ 17
5.3.10. Ohio Business Gateway ............................................................................................................................................................ 18
5.3.11. OAKS .......................................................................................................................................................................................... 18
5.3.12. Enterprise Geographic Information Systems (GIS) ................................................................................................................. 19
5.3.13. OhioBuys ................................................................................................................................................................................... 19
5.4. Application Security Architecture .................................................................................................................................... 19
5.5. Microsoft Office 365 Service ............................................................................................................................................. 20
5.5.1. Microsoft 365 Apps ...................................................................................................................................................................... 20
5.5.2. Microsoft 365 Platform Features ................................................................................................................................................. 20
5.5.3. Microsoft Power Platform ............................................................................................................................................................ 20
5.6. Network Services ............................................................................................................................................................... 21
5.6.1. Ohio One Network........................................................................................................................................................................ 21
5.6.2. Secure Authentication ................................................................................................................................................................. 21
5.6.3. Wireless as a Service................................................................................................................................................................... 21
5.7. Voice Services....................................................................................................................................................................22
5.7.1. Voice over Internet Protocol (VoIP)............................................................................................................................................. 22
State of Ohio Department of Administrative Services / Office of Information Technology
Supplement A: State IT Policy, Standard and Service Requirements P a g e | 2
1. Contractor Identification and Supplement Definitions
Active Directory means the “directory service” portion of the Windows operating system. Active Directory
manages the identities and relationships of the distributed resources that make up a network environment. It
stores information about network-based entities (e.g., applications, files, printers, and people) and provides a
consistent way to name, describe, locate, access, manage and secure information about these resources.1
Agency means State of Ohio agency.
Contractor for the purposes of this supplement, includes subcontractors or other personnel under the authority
or control of the Contractor performing the work or providing the services under this Contract.
Please provide the following information in the space below: Contractor name,
Contractor address, associated Contract or RFP number, and
solution/product/service(s) being proposed in response to the Contract or RFP.
Contract means the contract or RFP listed above under Contractor.
Customer means the Agencies, boards, commissions, institutions of higher education or local government
entities that are authorized to leverage State of Ohio IT services.
DataOhio Portal established by Executive Order 2019-15D, the DataOhio Portal (DOP) displays public datasets
and facilitates the request, approval, and delivery of secured datasets, providing for public access to information
with transparency and ease. The portal improves Ohioan and customer interactions with Agencies.
State means the State of Ohio.
User is the individual or (system) process authorized to access a system.2
2. Overview of Supplement and Requirements
This State IT Policy, Standard and Service Requirements Supplement (“Supplement”) applies to any and all work,
services, locations and computing elements that a Contractor performs, provides, occupies or utilizes in conjunction
with the delivery of work to the State and any access to State resources in conjunction with delivery of work.
This Supplement specifically applies to:
A. Major and minor projects, upgrades, and other software and systems inclusive of all State elements or
elements under a Contractor’s responsibility utilized by the State;
B. Any systems development and integration activities performed by a Contractor; and
1 “Active Directory” Gartner IT Glossary. Web. 3 January 2024. < https://www.gartner.com/en/information-
technology/glossary/active-directory>.
2 “FIPS 200, Minimum Security Requirements for Federal Information and Information Systems.” U.S. Department of
Commerce National Institute of Standards and Technology, March 2006.
<https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.200.pdf>.
State of Ohio Department of Administrative Services / Office of Information Technology
Supplement A: State IT Policy, Standard and Service Requirements P a g e | 3
C. Any authorized change orders, change requests, Statements of work, extensions or amendments to a
Contract.
The terms in this Supplement are in addition to any Contract terms and conditions. In the event of a conflict between
this Supplement and a Contract, the strictest standard prevails.
3. Proposed Variances to Supplement Requirements
Contractors performing the work under the Contract are required to comply with this Supplement unless the State
has approved a variance.
ANY PROPOSED VARIANCES TO THE REQUIREMENTS OUTLINED IN THIS SUPPLEMENT MUST BE
IDENTIFIED IN APPENDIX A - REQUEST FOR VARIANCE TO STATE IT POLICY, STANDARD OR SERVICE
REQUIREMENTS. CONTRACTORS MUST NOT MAKE ANY CHANGES TO THE LANGUAGE CONTAINED
WITHIN THIS SUPPLEMENT. In the event a Contractor finds it necessary to deviate from any of the IT Policies, or
Standards referenced in this Supplement, a variance may be requested, and the requesting Contractor must provide
a sufficient business justification for the variance request. In the event that a variance is requested post Contract
award (e.g., a material change to the architecture), the Ohio Department of Administrative Services (DAS) Office of
Information Technology (OIT) IT Strategic Investment and Architecture Team will engage with the Contractor and
appropriate State stakeholders to review and approve or deny the variance request.
4. State and DAS IT Policies and Standards
A Contractor must comply with all State and DAS IT Policies and Standards. For the purposes of convenience, a
compendium of IT Policy and Standard links is provided in the table below.
Table 1 – State and DAS IT Policies and Standards
Item
Link
State IT Policies and Standards (Please note: The
documents appear under the topics Statewide Policy
Policy Finder: https://das.ohio.gov/technology-and-strategy/policies
and Statewide Standard in the Policy Finder.)
DAS IT Policies and Standards
(Please note: The documents appear under the topics
DAS Policy and DAS Standard in the Policy Finder.)
100-11 Protecting Privacy
700-00– Technology / Computer Usage Series
2100 – IT Operations and Management Series
Policy Finder: https://das.ohio.gov/technology-and-strategy/policies
Please affirm compliance with State and DAS IT Policies and Standards. If this section, or portions of this
section are not applicable, please explain and note as N/A. Please note that any proposed variances must
be identified in Appendix A – Request for Variance to State IT Policy, Standard or Service Requirements.
The language within the Supplement shall not be modified.
State of Ohio Department of Administrative Services / Office of Information Technology
Supplement A: State IT Policy, Standard and Service Requirements P a g e | 4
5. State IT Services
DAS OIT delivers IT and telecommunication services. DAS OIT is responsible for operating and maintaining IT and
telecommunication hardware devices, as well as the related software. This Supplement outlines a range of service
offerings from DAS OIT that enhance performance capacity and improve operational efficiency. Explanations of each
service are provided and are grouped according to the following solution categories. Where applicable, Contractors
are required and expected to incorporate these services into their solutions or provided services.
5.1. State IT Cloud Smart Strategy
Executive Order 2019-15D, “Modernizing Information Technology Systems in State Agencies,” required all
cabinet Agencies, boards and commissions to migrate information technology systems to the State’s cloud
environment managed by DAS OIT. From this Executive Order, the State IT Cloud Smart Strategy
(“Strategy”) evolved to support Customer cloud service needs. This Strategy is designed to provide a value-
driven, dynamic, and cost-effective set of differentiating core Statewide services and innovative technologies
from public and private clouds that will improve State operations and the quality of services to Ohioans.
As part of the Strategy, DAS OIT operates a Cloud Center of Excellence (“CCoE”) to focus on leveraging
the State’s investment in the private cloud, while incorporating efficiencies from public cloud providers. The
CCoE provides guidance that will assist in realizing the value of a multi-cloud investment. The goal is to
evaluate and provide the most optimal hosting environment in the State’s public and/or private clouds. The
CCoE offers a Cloud Brokerage Service (“Brokerage Service”) that supports and guides Agencies as they
look to Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) application and solution
modernization opportunities.
Any proposed Statewide or individual Customer solution must comply with the Strategy.
The following graphic illustrates Agency, DAS OIT, cloud service provider (i.e., cloud vendor), and vendor
managed responsibilities for each of the cloud services offered through the Brokerage Service, including the
private cloud. These service offerings are described in further detail in the sections below. Please note that
some solutions may span more than one of these categories, depending on the Agency’s business need.
Cloud Services Responsibility Matrix
State of Ohio Department of Administrative Services / Office of Information Technology
Supplement A: State IT Policy, Standard and Service Requirements P a g e | 5
This is the opportunity summary page. It provides an overview of this opportunity and a preview of the attached documentation.