11954_Questions and Answers_Vol.4 POSTED.docx

ODOT Procurement Office 355 Capitol St. NE, MS 33 Salem, OR 97301 Telephone: 503-986-2710 Email: katie.bighill@odot.oregon.gov

This Questions and Answers document is ODOT’s response to questions asked by parties interested in this Request for Information (RFI). The responses are being made available to all parties interested in this RFI. This Questions and Answers document does not change or otherwise modify the RFI documents; the RFI documents can only be changed by Addendum issued on OregonBuys.

Questions and Answers, Vol #4

QUESTION #1:

1. I saw the recently released ITSM replacement RFI for ODOT. I then saw that the Oregon Department of Administrative Services has an ITSM contract (9462) with CDW Government Solutions which expires in July of this year. Are the two (ODOT ITSM and Oregon DAS ITSM) potential requirements related to each other or completely separate?

For ODOT ITSM and Oregon DAS ITSM. The reason for my inquiry is that, in the ODOT RFI, “ ODOT anticipates releasing an RFQ (or RFP) for the ITSM solution by March 1, 2025, and have the new ITSM system in place and functioning by October 2025.” This timeline made me want to double check that the two departments have separate requirements for ITSM and, if needed, separate solicitations would be released.

RESPONSE #1:

1. The ODOT ITSM RFI is separate from the DAS ITSM contract (9462) with CDWG and therefore the anticipated RFQ or RFP that may be released from this RFI will be a separate solicitation.

QUESTION #2:

Supplier must comply with the applicable requirements set forth in DAS Oregon Statewide Information Technology and Security Policies, which may be amended from time to time: Department of Administrative Services : Statewide Policies and Guidelines : State of Oregon

We believe the following policies are applicable:

· 107-004-150 - Cloud and Hosted Systems Based on our SSAE-18, ISAE 3402, SOC 3, and SOC 2 Type 2 compliance and required audits, we believe we will meet the requirements of this policy.

Can you please clarify if there are any other policies you believe are applicable to this RFI?

RESPONSE #2:

All policies listed in the Information Technology and Security section apply. By mentioning specific policies below, we are not excluding any policy.

Policies which have direct applicability include, but are not limited to, the following:

· Cloud and Hosted Systems Policy with Exhibit (107-004-150)

· Covered Products and Vendors Policy (107-004-155)

· Cyber and Information Security (107-004-052)

***End of Document*** Page 2 of 3 Q & A #4 RFI S-73000-00011954 image1.wmf