2108 Attachment 10 SaaS.docx
DOCX document 532 KB Posted
- Attached to
- New Permit System
- Solicitation number
- 2108
- Issued by
- Kenosha County, Wisconsin
About this file
This is a SaaS Design Description attachment for a Request for Proposals issued by Kenosha County, Wisconsin for a new Permit System (#2108). The document establishes the county's evaluation criteria and requirements for vendors proposing Software-as-a-Service deployment options. The scope of the desired solution includes a new permit system with customer portal interface, sanitary maintenance system, payment gateway services, integration with enterprise document repository platform, parcel information system data integration, GIS system integration, and conversion of current system permit, project, code violation, and sanitary maintenance information. The county is considering all technology deployment strategies including On-Premise, Hosted, and SaaS options, with this attachment specifically addressing SaaS proposals.
The attachment requires vendors to provide comprehensive technical specifications and service level guarantees across multiple categories including data center location and availability, system updates and testing procedures, authentication methods, information security protections, and disentanglement capabilities. Vendors must detail proposed service level agreements for system availability, response times, issue resolution, recovery objectives, patch implementation, and security breach notification. Additional requirements include confirmation of SSAE 16 SOC 2 compliance or equivalent cloud security standards, disaster recovery plans with regular testing, daily geographically-dispersed backups, encrypted and antivirus-protected infrastructure, and documentation of historical uptime metrics for the preceding six months. The vendor must also address data retention, export capabilities, remote access security requirements, bandwidth specifications, and incident notification procedures to ensure Kenosha County maintains adequate oversight and data protection throughout the contract term.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 2108 Attachment 1 Checklist.pdf | ||
| 2108 Attachment 11 Web.docx | DOCX document | |
| 2108 Attachment 2 Signature.docx | DOCX document | |
| 2108 Attachment 8 Requirements.docx | DOCX document | |
| 2108 Attachment 7 Effort.xlsx | XLSX spreadsheet | |
| 2108 Attachment 13 Partner_Info.docx | DOCX document | |
| 2108 Addendum 1.docx | DOCX document | |
| 2108 Attachment 14 Reports.docx | DOCX document | |
| 2108 Attachment 12 ClientServer.docx | DOCX document | |
| 2108 Attachment 4 Tech.docx | DOCX document | |
| 2108 Attachment 5 Prof Svcs.docx | DOCX document | |
| 2108 RFP Documents.pdf | ||
| 2108 Attachment 3 Prop State.docx | DOCX document | |
| Revised Attachment 4 Tech.docx | DOCX document | |
| 2108 Attachment 9 Cost.xlsx | XLSX spreadsheet | |
| 2108 Attachment 6 Reference.docx | DOCX document |
Show all 16
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Request for Proposals for Permitting Solution (#2108) Kenosha County, Wisconsin
Attachment 10 – SaaS Design Description
Type of Deployment
| Question |
| Answer |
Solution is a SaaS solution? (Yes/No)
If “No” above, then leave the rest of this form blank.
Data Center
| Question |
| Answer |
Where are the data centers located?
Are any third-party providers used to deliver PaaS or IaaS services? If so, please list.
How many environments are proposed?
Availability Provide historical availability for data center for past six months. Provide answers to columns two through six in minutes.
| Month |
| Total Minutes |
| Downtime |
| Scheduled Maintenance |
| Other Downtime |
| Total Downtime |
| % Availability |
SEP 2020
OCT 2020
NOV 2020
DEC 2020
JAN 2021
FEB 2021
Updates
| Question |
| Answer |
How often is solution updated?
How much advance notice are customers provided for new updates?
Does customer have the opportunity to test updates in a pre-production environment?
How long do customers have to test updates before go-live?
Please provide supporting documentation
Authentication
| Question |
| Answer |
Does the system support SSO or LDAP?
Does the system support MFA?
Information Security
| Question |
| Answer |
What protections are provided against data breach?
Please include information regarding cybersecurity standards, recent independent audits, notification process, remedy, and indemnification provided.
Disentanglement
| Question |
| Answer |
Can customer data be exported in nonproprietary format?
Proposed Service Level Guarantees If SaaS services are proposed, please complete the following table identifying proposed service level guarantees. For each service, please indicate the metric used to measure the service quality, the proposed requirement (target for service), and the proposed remedy or penalty if guarantee is not met.
| Service |
| Metric** |
| Requirement/Guarantee*** |
| Remedy |
System Availability* (Unscheduled Downtime)
System Response (Performance)
Issue Response Time
Issue Resolution Time
Recovery Point Objective (RPO)
Recovery Time Objective (RTO)
System Data Restore
Implementation of System Patches
Notification of Security Breach
Please list other proposed service levels
Notes:
* Formula used to calculate availability.
** How is performance against service levels reported to the County?
*** Describe process for County reporting issues to the vendor.
Proposed Solution Information
| SaaS Solution |
| Yes |
| No |
| Comments |
| 1. Do you provide direct SaaS solutions? |
| ☐ |
| ☐ |
| Click here to enter text. |
| 2. 2.0 Does a 3rd party vendor host any part of your product and/or data? |
| ☐ |
| ☐ |
| Please note the vendor name and the part of the product/data they touch |
| 3. Does your product require or recommend a firewall on the client side? |
| ☐ |
| ☐ |
| If no, please list. |
| If yes, do you support PaloAlto firewalls? |
| ☐ |
| ☐ |
| Click here to enter text. |
| 4. Can the product be securely accessed from any location with an Internet/broadband connection? |
| ☐ |
| ☐ |
5. What are the security requirements for remote users (non-office users)?
Click here to enter text.
6. What are the minimum bandwidth requirements?
Click here to enter text.
| 7. Does the product require any type of client (i.e. Citrix, clientware, Cisco VPN, etc.)? |
| ☐ |
| ☐ |
| Please list the required type of client. |
| 8. Can the database be accessed to write customized reports? |
| ☐ |
| ☐ |
| Click here to enter text. |
| 9. Does the product require any other applications? |
| ☐ |
| ☐ |
| If yes, please list. |
10. How is data saved and stored?
Click here to enter text.
| 11. Does the product have redundant Internet providers? |
| ☐ |
| ☐ |
| Click here to enter text. |
| 12. Does the product support restricting IP based access? |
| ☐ |
| ☐ |
| Click here to enter text. |
13. What are the network infrastructure requirements?
Click here to enter text.
| 14. Is your site secured with encryption and antivirus? |
| ☐ |
| ☐ |
| If yes, please describe. |
15. How often is access audited and by whom?
Click here to enter text.
16. How does Kenosha County retain a copy of the data if the county decides to end the contract?
Click here to enter text.
17. Is an annual data backup available to Kenosha County?
| 18. Vendor conforms to the SSAE 16 SOC 2 security standards or a similar cloud security standard such as Shared Assessments Program, Common Assurance Maturity Model, Cloud Security Alliance, or FedRAMP |
| ☐ |
| ☐ |
| Click here to enter text. |
19. How often is routine maintenance performed on remote systems?
Click here to enter text.
Backups?
Click here to enter text.
Updates?
Click here to enter text.
Anti-virus?
Click here to enter text.
| 20. Vendor creates daily backups to a geographically removed site |
| ☐ |
| ☐ |
| Click here to enter text. |
| 21. Vendor has a disaster recovery plan and conducts regular testing of that plan. |
| ☐ |
| ☐ |
| Click here to enter text. |
| Is there an off-site disaster recovery location for your server farm? |
| ☐ |
| ☐ |
| Click here to enter text. |
| How often is this tested? |
| ☐ |
| ☐ |
| Click here to enter text. |
| 22. In the past two (2) years, how many outages have you experienced due to your own infrastructure problems? |
| ☐ |
| ☐ |
| Click here to enter text. |
| 23. Do you have normal ‘downtime’ windows for system backup and maintenance? |
| ☐ |
| ☐ |
| Click here to enter text. |
24. In the event access to your site is unavailable, what steps will you take to notify the customer of progress towards resolving the issue?
Click here to enter text.
What steps should the customer take during this time?
Click here to enter text.
25. What is the Recovery Time Objective (RTO)?
Click here to enter text.
26. What is the Recovery Point Objective (RPO)?
Click here to enter text.
27. What is the guaranteed uptime?
Click here to enter text.
KC_ATT_4_SaaS.docx Page 3 of 3 image1.jpeg
File details come from the government source that posted it. Updated .