11-RFP 10 County Tech Standards Questionnaire.pdf

Approved By: CIO Approved Date: 10/21/2025

County Technology Standards Requirements for On-Premise, Hybrid, or Cloud/Hosted Solutions Questionnaire

The following Los Alamos County Technology Standards are required and shall be supported by the vendor, contractor, reseller henceforth in this document called “Operator”, for any County solicitation requiring technology or integration to the County network and incorporated into any resultant agreement. Standards are listed with the expectation that the Operator will provide software updates to allow Los Alamos County to stay on supported versions of hardware, underlying software and protocols as outlined below.

Respondents must provide documentation that they meet the requirements in respect to the solution that they are responding with. On premise respondents do not need to comply with hosted requirements. Hosted solution respondents do not need to comply with on-premise requirements. If the solution is a hybrid of both categories of solution, then both on-premise and hosted requirements apply as applicable to the response.

For each standard requirement in the table below, check “YES” to indicate compliance, “NO” to indicate non-compliance, or “N/A” to indicate that the requirement is not applicable. In the cell beneath each standard requirement, briefly describe how Offeror will comply or why a standard requirement is not applicable. If Offeror can comply, but not exactly in the way described in the standard, please describe the substantial equivalent offered or alternate method for conforming to the requirement.

Where other County policies or documents are referenced, County will provide these documents upon request.

STANDARD REQUIREMENT YES NO N/A

Server Operating system (OS) (On-Premise)

Microsoft (MS) Windows Server 2019 and above, 64 bit or current (Standard and Datacenter). Contractor software must be maintained to run on a supported platform service level as defined by Microsoft at the latest stable patch level.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Server Hardware (On-Premise)

Preferred: Use of County VMware server platform.

Environment design must be submitted and reviewed by IM Division for acceptance. Proposals shall include required hardware and licensing of VMware, operating system, and proposed application-based requirements.

Application with a proven Virtual installation template is preferred.

Physical Server minimum hardware specifications consist of: Multi Socket/Multi Core processor (standalone or virtual server) as determined by Los Alamos County IM Division. Contractor software must be maintained to run on a supported platform service levels as defined by Microsoft at the latest stable patch level.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Network (On-Premise)

Supported network protocol is TCP/IP. Standards based NIC rated at 100/1000/10G. Solutions shall be compatible with Cisco Network Technology.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Wi-Fi (On-Premise & Hosted)

Supports current minimum Wi-Fi protocols.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Remote Network Access (On- Premise)

Direct remote access to the County network and server environment shall be done using the County’s Cisco AnyConnect SSH VPN. Once a VPN connection is established end-point connections are supported via Microsoft RDP. Operator support accounts shall be set up in accordance with the adopted Los Alamos County IT Usage and Security Policy #1210.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

LAC Network Account Privilege (On-Premise & Hosted)

Desktop Client Software shall function for end users with standard user privileges; users cannot install software and shall not have administrative rights.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Desk Hardware (On-Premise & Hosted)

Physical unit minimum hardware requirements consist of: Intel core i5 or higher based processor, minimum 16 GB RAM, integrated graphics 1280 capable video minimum, display port, input or HDMI, 4 USB 2/3 ports.

Support deployment onto Azure Virtual Desktop (AVD) platform, specifically cloud-based platforms from Microsoft Azure, Amazon Web Service (AWS),Google Cloud Platform or Oracle Cloud Infrastructure (OCI)

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Desktop OS (On-Premise & Hosted)

Microsoft Windows 11 Enterprise at current Service Pack (SP).

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Internet Browser (On-Premise & Hosted)

Internal County Network: Google Chrome and Edge, at its latest version, are the installed browsers on county devices. Google Chrome is the county standard. New web Applications must be based on HTML5.

Applications requiring Internet Explorer, Microsoft Silverlight, Java and Flash are not supported. IM Division shall be consulted for compatibility issues prior to considering new application purchases requiring Java.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Database Software Products (On-Premise)

Supported database software is Microsoft (MS) SQL server version 2019 and above. New MS SQL Server product installations will require review, purchasing of licenses, appropriate hardware, and maintenance in support of proposed project or instance install to the County MS SQL Server Environment. MS SQL server software for new implementations shall be at within the Microsoft certified support release level or current.

Server components for proposed projects require review and purchasing as part of the project initiative.

Operator software must be maintained to run on a supported platform service level as defined by Microsoft.

Passwords are not permitted to be transported in clear/plain text.

Vendor implementation shall not use the SA password for user level functions. SA passwords shall be maintained by the County DBA.

Only database instances can be installed on the County MS-SQL Environment. If a vendor software component install is necessary on the database server, a standalone installation will be required.

Vendor software must use standard Access & Connection architecture for accessing databases on the County MS-SQL Environment.

Applications based on Microsoft Access are not supported. Applications based on SQLEXPRESS version should be reviewed and the limitation understood by the customers and the vendor.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Intranet: Collaboration and Web Publishing (On-Premise & Hosted)

Microsoft SharePoint Online is the basis for the County’s Intranet. Any products that will integrate or utilize the County’s Intranet site shall require a compatibility consultation with IM Division before purchase and implementation.

Briefly describe how Offeror will comply, alternate methods, Email (On-Premise & Hosted)

Microsoft M365 with hub transport for relay. If SMTP relay access from on premise vendor specific software is necessary, permission to use the County Email exchange shall be obtained prior to contracting or purchase of the software or solution.

If SMTP relay access from hosted vendor specific software is necessary, preference is for SMTP relay to be hosted by vendor and shall meet the County’s encryption standard. The vendor specific solution must be supported and maintained to relay off County email domain and directed to hand off the email message to another mail server that can get the message closer to its intended recipient in accordance with service levels as defined by Microsoft for the M365 product.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Geographic Information Standards (GIS) (On-Premise & Hosted)

The County uses strictly ArcGIS products by ESRI for GIS. Supported versions are one iteration behind the latest ESRI-supported release.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Mobile Devices (On-Premise & Hosted)

Supported mobile platforms are Windows, iOS/iPad OS, Android OS. Devices must support Intune enrollment and current county’s compliance and security standards.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Security (On-Premise & Hosted)

Intranet devices must be capable with multi-factor authentication (MFA) using the County’s current MFA systems. Cisco Secure EndPoint Antivirus and Antispyware Enterprise software are used on all intranet computing devices; vendor solutions shall work in conjunction with stated antivirus products.

Devices requiring wireless access must a) be domain integrated or b) have the ability to accept captive portal agreement (a web page that the user of a public-access network is obliged to view and interact with before access is granted).

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Authentication (On-Premise & Hosted)

Enterprise-wide applications shall be capable of Microsoft Entra ID integration for user authentication and utilize County’s MFA.

will comply, alternate methods, or why a standard requirement is not applicable.

Encryption (On-Premise & Hosted)

SSL (Secure Socket Layer) / TLS (Transport Layer Security) encryption is required for secure connection of both internal and external facing web applications.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Hosted/Cloud Based Services

Los Alamos County is interested in taking advantage of Anything as a Service (XaaS) opportunity available through Cloud Service Providers (CSP), in Government Cloud (GCC) where required. CSP data centers must be located within the United States.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Hosted/Cloud Based Services

Data centers must be FedRAMP certified for SaaS solutions procured by departments if they also store or may store Los Alamos National Laboratory (LANL) critical infrastructure data for County operations.

Departments must verify with LANL authority to confirm that this requirement is applicable to the LANL information to be stored.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Hosted/Cloud Based Services

Ownership of County data held in the CSP solution shall remain with the County of Los Alamos. County may have on-demand access to the data for export/download or have the data delivered by request by the CSP with a maximum 48-hour compliance window. Exports shall be in an industry standard format.

Briefly describe how Offeror will comply, alternate methods, or why a standard requirement is not applicable.

Hosted/Cloud Based Services

Data centers must have security measures in place, and available, to protect the system and its data.

Backups shall meet county’s current data backup guidelines and retention standards. Backups must reside within the United States.

will comply, alternate methods, is not applicable.

Hosted/Cloud Based Services

Solution must meet applicable statutory requirements/data security standards (ex. HIPAA, CJIS, PCI DSS...)

Briefly describe how Offeror will comply, alternate methods,