24-101-RFP_Compliance-Expertise_Matrix.xlsx
XLSX spreadsheet 42 KB Posted
- Solicitation number
- 24-101-RFP
- Issued by
- Orange County, Orlando City, Florida
About this file
The document is a Request for Proposal (RFP) matrix for IT Consulting Services issued by an Aviation Authority in Florida, detailing comprehensive IT consulting requirements for ongoing technology services and support. The Aviation Authority seeks one or more consultants to provide a wide range of IT services including research, technology concept development, business case analysis, requirements definition, operational readiness, project management, resource acquisition, maintenance, operations, planning, policy development, disaster recovery, security assessment, and related technology services. The contract will cover multiple technology domains such as wireless technologies, video analytics, digital media, unified communications, airport information management, content management, parking technologies, mobile technologies, application development, business intelligence, and infrastructure management.
The RFP encompasses an extensive list of current commercial products in use by the Aviation Authority, including Oracle financial and database applications, ESRI GIS systems, IBM enterprise software, SITA passenger processing systems, various communication and management platforms, Microsoft enterprise services, cybersecurity tools, and numerous other specialized technologies. The consulting services are intended to support the Aviation Authority's Capital Improvement Plan and Information Technology Master Plan, with consultants expected to provide flexible, adaptive expertise across a broad spectrum of technological needs. The matrix indicates a comprehensive approach to IT consulting that goes beyond traditional service provision, emphasizing strategic technology partnership, continuous learning, and the ability to respond to emerging technological changes and challenges.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| 24-101-RFP-PS_IT_Continuous_Consultant_Services_-_MASTER.pdf | ||
| 24-101-RFP-PS_IT_Continuous_Consultant_Services_-_MASTER.pdf | ||
| 24-101-RFP_Compliance-Expertise_Matrix.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| Enter experience information into the open cell that corresponds to the REQUIREMENT on the same row, as instructed in the Attachment "A" - Scope of Services/Work section of RFP. | |
| 2.1: Scope of Services |
a) RESEARCH:The Consultant must conduct directed research on technologies and their uses or potential uses, and document the findings and conclusions; commercial products (hardware, firmware, and software) and services that incorporate those technologies, including fit for purpose, limitations, issues, and probable total cost of ownership; and related government and industry standards and best practices, methods, regulations, and policies. The Consultant must plan, execute, monitor, and document discoveries and conclusions from hands-on evaluations and demonstrations of services and products to determine the probable fit for the intended purpose or to determine compliance with pre qualification requirements. Such evaluations and demonstrations must be performed in Consultant laboratories, independent laboratories, Aviation Authority IT laboratories, or specific circumstances, in product source laboratories in a structured, controlled, and monitored environment.
b) CONCEPTS DEVELOPMENT: The Consultant must develop and document solution options to meet the needs (e.g., functional, performance and interface requirements) of the enterprise at a conceptual level, but sufficient to describe possible commercial product and service components, custom designed and developed components, their inter-relationships, and an allocation of requirements to those components. Solution options and risks must also be defined.
c) BUSINESS CASE DEVELOPMENT: The Consultant must develop and document a business case for each concept chosen for additional consideration to include: business impact assessment; technical infrastructure impact assessment, including impacts due to fail-operational and cyber-security requirements; risks assessment; credible implementation timeline; cost-benefits assessment that must address both direct and indirect project costs and benefits (including Return-On-Investment (ROI), Internal Rate-of-Return (IRR), and intangible benefits).
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| d) REQUIREMENTS DEVELOPMENT: Once a concept is selected for implementation and funded, the consultant must develop and document complete functional, performance, and interface requirements, dependencies and limitations (e.g., financial, regulatory, technical, operational), and re-assess and amend the business case (referenced in Scope Item (“c” above)) above to reflect the additional information developed in this phase. At this point the Aviation Authority must establish a design, development and test approach: |
1) The Aviation Authority Personnel only.
2) The Aviation Authority and Consultant Personnel.
3) Consultant Personnel only.
4) Competition among Consultants
5) Competition among Non-Consultants
Factors to be considered in establishing the preferred approach include but are not limited to the resources the Aviation Authority or the Consultant can allocate to the effort at the time needed and dollar thresholds defined elsewhere. The services the Consultant must provide during the design, development and test phase for each approach are delineated in subsequent paragraphs.
1) The Aviation Authority's Personnel Only: Provide assistance on an as needed basis.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| 2) The Aviation Authority and Consultant Personnel: The Consultant must provide qualified personnel to assist (augment) the Aviation Authority personnel with: definition of design requirements; design specification definitions; development of custom firmware; development of software; report development; acquisition of commercial software, firmware and hardware; installation, configuration and integration of commercial and custom developed products; unit, subsystem and system verification and validations testing; problem determination and resolution; and production of related documentation. |
3) Consultant Personnel Only: The Consultant must submit a proposal to provide qualified personnel to perform the services described above in (2) in an independent, Consultant-responsible manner.
4) Competition among Consultants: Two (2) or more Consultants must respond to an Aviation Authority request for proposal based on the functional, performance and interface requirements listed above in option two (2). The selected consultant must also perform the services described above in option two (2) in an independent, Consultant-responsible manner.
NOTE: In reference to option (3) and (4) above the role of the Aviation Authority will be one (1) of a client; primarily in a review and approval role.
5) Competition among Non-Consultants: In cases of open competition from the consultants are excluded the chosen Consultant must prepare or assist the Aviation Authority in the preparation of all documents required for the open competition and provide professional advice.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| e) OPERATIONAL READINESS: The Consultant must perform or assist in performing those services required to bring a solution developed in the cases described above or acquired into an operational state, including but not limited to: readiness of facilities, systems and equipment; staff augmentation; training of Aviation Authority IT personnel; and training of end users. |
f) PROJECT MANAGEMENT (PM) AND OWNER AUTHORIZED REPRESENTATION (OAR): The Consultant must be able to provide qualified personnel for PM and OAR services for IT projects or for IT portions of non-IT projects. These services include but are not limited to monitoring and reporting on compliance with resource allocations, schedules, technical and business issues and partner issues, and assistance in resolution of issues.
g) RESOURCE ACQUISITION: The Consultant must provide qualified personnel to assist in development of statements of need, rationale and methods for acquiring IT resources (e.g., facilities, systems, equipment, funds, personnel) needed to meet IT demands and commitments for services. Personnel acquisition assistance would include preparation of job descriptions and postings, review of resumes, interviews to validate qualifications, and support as requested during in-person interviews.
h) MAINTENANCE: The Consultant must be able to provide qualified personnel to assist in the operation of in-place systems, subsystems and applications, including but not limited to the installation and testing of software and firmware patches and releases, software and firmware version control, preventive and corrective hardware and software maintenance, and removal and repair or replacement of hardware. These in-place systems, subsystems and applications include but are not limited to the major items identified in Section 2.3 (Current Commercial Products) below.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| i) OPERATIONS: The Consultant must be able to perform the operation of in-place systems and subsystems, including but not limited to re-location, configuration, start-up, shut-down, backup, diagnostics and function and performance data collection, and other operational functions as an extension of Aviation Authority's IT Department personnel. These systems and subsystems include but are not limited to those identified in Section 2.3 (Current Commercial Products) below. |
j) PLANNING: The Consultant must be able to provide qualified personnel to create and update: IT Master Plans and Roadmaps; IT inputs to Airport Strategic, Master, and Improvement Plans; IT inputs to Facilities, Systems and Equipment Integration and Test Plans; and all other plans that require IT input.
k) POLICIES AND PROCEDURES: The Consultant must provide qualified personnel to: draft and revise policies and procedures related to the services described within this document, monitor standards development, and monitor appropriate adoption of these items into policies, procedures and products.
l) DISASTER RECOVERY AND BUSINESS CONTINUITY: The Consultant must provide personnel to assist in the development, updating and testing of requirements for the Aviation Authority’s Disaster Recovery Plan and BCP components. This expertise will extend to those applications used to track plan components and should include experience with NFPA 1600, ISO 24762, and current techniques for disaster recovery and business continuity planning.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| m) SECURITY: The Consultant must provide personnel to assist with ongoing security assessment and monitoring activities, security metrics, systems and application hardening and configuration, development of security policies, adherence to compliance standards such as PCI DSS, HIPAA, state and federal law, and internally driven regulatory requirements. Expertise must include vulnerability assessment, penetration testing, risk assessment, incident response, security mitigations, log management, forensic analysis for incident artifacts, and other activities in alignment with industry best practices. |
n) RELATED SERVICES: Due to the rate of change in technologies, products and services, it is not possible to delineate each service that could be required during the term of the Agreement, including services that could be introduced during the term. The Consultant must be able to respond to change and describe their approach to maintaining or acquiring the expertise needed. The intent is to include such changes and introductions in services in the scope of this Agreement.
2.2 Technologies The term Technologies means the science and the hardware and software systems, equipment and components that incorporate the technologies.
a) Wireless technologies including both licensed and unlicensed bands for use in customer service, passenger processing, way finding, advertising, location-based services, queue management, network infrastructure redundancy, operations and airfield management, and other functions as needed.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| b.) Video technologies and analytics for security, passenger flow monitoring and modeling including but not limited to interactive multilingual video and voice on monitors and smart mobile devices for customer assistance and information, including way finding, parking and transportation, advertising, paging and visual paging. |
c.) Digital media content development including live data interfaces and interactive experiences displayed across variable digital canvas sizes.
d.) Unified Communications technologies including but not limited to MS Exchange, MS Teams, video conferencing, Presence Services, language translation, digital messaging, remote agent information kiosk, and IP-PBX systems.
e.) Airport information management technologies for airport operational management, reporting, and planning including but not limited to: airport operations and safety compliance, airport resource allocation and management, and airline flight information interfacing and displays.
f.) Content and records management technologies for the storage, distribution and collaboration of documents along with related process automation via business process applications.
g.) Parking technologies for revenue control, parking space monitoring, parking guidance, parking reservations, and method of payment.
h.) Mobile technologies for customer service, airport operations, and other purposes.
i.) Application development technologies for: Microsoft, Oracle, Web, iOS, Android and Angular platforms.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
REQUIREMENTS EXPERIENCE
j.) Business intelligence technologies providing: real-time situational awareness for operations; near real-time operations performance and financial management; operations simulation and monitoring; historical trend and predictive analysis using various reporting, data warehouse, data lakes, big data and data science tools.
k.) IT systems and equipment monitoring and management technologies providing: proactive notification of risks and faults, security threats, automated resolution of potential faults, notification and reporting of system performance.
l.) Building Information Management (BIM) system technologies including but not limited to: generation and management of 3D digital representations and modeling of physical and functional characteristics of a facility.
m.) Geospatial technologies, including GIS, CAD, BIM and GPS for AC150 compliance, rates and charges, campus addressing, various map book creation, collaboration and distribution of maps and data both via intra and extranet architectures.
n) Information security processes, technologies, systems, and applications including but not limited to: monitoring / management of firewalls, intrusion prevention, vulnerability management and penetration testing, and compliance with Payment Card Industry (PCI) requirements and other security and privacy standards. Provide services to develop, implement, and enforce security policy.
o.) Building automation and management system technologies for monitoring, management, and performance reporting for: elevators/escalators, UPS and generators, fire detection and alarm systems, HVAC, low voltage and electrical systems, lighting control, and other technologies as needed.
24-101 IT: CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| p.) IT infrastructure technologies support including but not limited to: computer room design, physical and virtual servers, storage devices, communications devices, computer room HVAC and UPS, and copper and fiber optic cabling. |
q.) Airport trunk radio technologies and systems.
r.) Passenger and baggage processing technologies including: self-service baggage check and boarding control, baggage tracking, rebooking, biometric identification, passenger movement sensors, and others as processing technologies evolve and are adopted.
s.) Patron loyalty program technologies to enhance customer services to frequent parkers, frequent shoppers, and other repeat customers.
t.) Point-of-sale technologies and integration.
u.) Computer-based training technologies.
v.) Asset life cycle management technologies for facilities, systems, equipment, and software.
w.) System and data integrations using Service Orientated Architecture (SOA), Application Programmable Interface (API) Technologies, and Airport Application centric Point to Point interfaces following IATA and ACI best practices that include but are not limited to: Oracle SOA Suite, API management solutions, REST, SOAP, XML, and JSON.
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| x. Internet of Things (IoT) hardware, software, and system technologies and interfaces, standards and best practices. |
3. Current Commercial Products in Use by the Authority
| 1. Oracle Financial Applications, including e-Business Suite and Oracle Fusion Middleware |
| 2. Oracle Planning and Budget |
| 3. Oracle Database + Dataguard |
| 4. Oracle OBIEE |
| 5. Oracle SOA Suite |
| 6. Oracle WebLogic |
| 7. SplashBI Reporting |
| 8. Amadeus PROPworks |
| 9. UKG Workforce Central |
| 10. UKG Telestaff |
| 11. ESRI ArcGIS, Portal & Mobile Apps On-Premise and On-Line |
| 12. Autodesk AutoCAD, Collaborate Pro & Revit |
| 13. IBM Maximo |
| 14. IBM WebSphere |
| 15. Prometheus DataSplice |
| 16. SITA Com-Net Multi User Flight Information Display System (MUFIDS) |
| 17. Skidata and GateKeeper Parking Revenue Control System |
| 18. SITA Common Use Passenger Processing (CUPPS) |
| 19. SITA Common Use Self-Service (CUSS) |
| 20. SITA Biometric E Gates |
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| 21. Queue Management System | |
| 22. Veovo Resource Management System | |
| 23. VRC/VDGS/VIBES (STC BHS) – do we need to list these? | |
| 24. Fire Alarm Monitoring | |
| 25. Motorola RF Communications | |
| 26. Jervis B. Webb/Siemens Baggage Handling System(s) | |
| 27. MC2/Schneider Electric Building Operating System – Lighting and HVAC monitoring and control | |
| 28. Eaton Power Xpert Electrical Power Monitoring | |
| 29. Siemens Airfield Solution/ADB airfield lighting system | |
| 30. Schindler LiftNet Elevator Management System | |
| 31. Bombardier and Mitsubishi Automated Ground Transportation (AGT) monitoring and control | |
| 32. Softwarehouse CCure Access Control System (ACS) | |
| 33. HID SAFE physical identity management System | |
| 34. Qognify (Nice) Video Management Systems, Digital Video Recording Systems and Situator / PSIM | |
| 35. IED Paging System | |
| 36. Civix Airport IQ Operations Centers | |
| 37. SSI ASSP computer based training | |
| 38. Avaya PodFx | |
| 39. Avaya CM | |
| 40. Avaya Aura Messaging |
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| 41. Avaya Experience Portal | |
| 42. Avaya Aura Conferencing | |
| 43. Mutare Message Mirror | |
| 44. Mutare Voice Forms | . |
| 45. Microsoft Azure Services and M365 Suite | |
| 46. Microsoft Certificate Services | |
| 47. Microsoft Defender for Endpoint | |
| 48. Microsoft Exchange Services | |
| 49. Microsoft SharePoint On-Premise and On-Line | |
| 50. Microsoft SQL Server | |
| 51. DH2i DX Enterprise | |
| 52. Microsoft System Center Configuration (SCCM) & Operations Manager (SCOM) | |
| 53. Microsoft Internet Information Services (IIS) | |
| 54. Mobile Device Management Services (Airwatch) | |
| 55. Microsoft Windows Operating System servers, including clusters, virtual servers and blade servers | |
| 56. Netplus Telemanagement System | |
| 57. Linux based servers | |
| 58. Juniper and Palo Alto Software for intrusion prevention, detection, correction and reporting (e.g., Intrusion Prevention Systems (IPS) and firewalls) | |
| 59. F5 Load Balancer/applications delivery controller | |
| 60. Cisco core switches |
24-101: IT CONSULTING SERVICES
SUPPLEMENTAL INFORMATION MATRIX
| REQUIREMENTS | EXPERIENCE |
| 61. Cisco edge switches | |
| 62. Cisco security platforms | |
| 63. Aruba 802.11 wireless controllers, Clearpass, location engine, access points, and beacons | |
| 64. HPE Meridian platform and SDK | |
| 65. Solar Winds performance monitoring and trends, control and diagnostics | |
| 66. ServiceNow IT Asset and Work Management, and Governance, Risk and Compliance (GRC) | |
| 67. Salesforce Service Cloud | |
| 68. K2 Blackpearl | |
| 69. Contentful CMS | |
| 70. WordPress | |
| 71. YCD Cnario digital signage products | |
| 72. Synect multi monitor content creation, management and delivery systems | |
| 73. Native iOS and Android platform development | |
| 74. Angular development platform | |
| 75. Splunk (Enterprise, Security, UBA, Cloud) | |
| 76. Rapid7 Nexpose, Metasploit Pro | |
| 77. ProofPoint | |
| 78. CyberTriage Incident Response System |
File details come from the government source that posted it. Updated .