# RFP 2026-118, section 7: security

Answer Yes or No with a short explanation.

7.1 Is data encrypted in transit?
7.2 Are backups tested, and how often?
7.3 Do you operate a 24/7 security operations centre?
7.4 Do you support single sign-on for the customer portal?
7.5 Is access to production reviewed periodically?
7.6 Is security awareness training mandatory?