24-101-RFP-PS_IT_Continuous_Consultant_Services_-_MASTER.pdf

ORLANDO

AVIATION AUTHORITY

REQUEST FOR RESPONSE (RFP)

PROFESSIONAL SERVICES

24-101-RFP

INFORMATION TECHNOLOGY (IT) CONTINUING CONSULTING SERVICES

PRE- PROPOSAL CONFERENCE: August 28, 2023, at 10:00 a.m.

Respondents may attend in person or via Microsoft Teams Meeting.

Microsoft Teams meeting Join on your computer, mobile app or room device Click here to join the meeting Meeting ID: 251 851 269 83 Passcode: joztmk Download Teams | Join on the web

PRE-PROPOSAL LOCATION: GOAA Annex Building Purchasing Department, Conference Room “Thor” – 2nd Floor 5855 Cargo Road Orlando, FL 32827- 4399

DEADLINE FOR QUESTIONS September 1, 2023, 5:00 p.m. EST

SOLICITATION SUBMISSION DUE DATE: September 13, 2023, 11:00 a.m. EST Sealed Electronic offers will be accepted up to 11:00 AM (local time), Wednesday, September 13, 2023, via the electronic procurement portal referenced above. Opening will be held via Microsoft Teams:

Microsoft Teams meeting Join on your computer, mobile app or room device Click here to join the meeting Meeting ID: 258 855 899 864 Passcode: FpPnpL Download Teams | Join on the web https://teams.microsoft.com/l/meetup-join/19%3ameeting_ZDVjMTIxYTUtODc2Zi00NGIxLThiMTYtNjJmNjg3NjAxMzU5%40thread.v2/0?context=%7b%22Tid%22%3a%22d704ebcc-99a6-46da-84cb-6a2258292a9a%22%2c%22Oid%22%3a%22fa6f3ea6-e55a-4beb-b079-9f8561eb1cd6%22%7d https://www.microsoft.com/en-us/microsoft-teams/download-app https://www.microsoft.com/microsoft-teams/join-a-meeting https://teams.microsoft.com/l/meetup-join/19%3ameeting_YmQ2YjczZjEtNTUzZS00NjE1LThkZWMtZjcwYjM1ZThlNmYz%40thread.v2/0?context=%7b%22Tid%22%3a%22d704ebcc-99a6-46da-84cb-6a2258292a9a%22%2c%22Oid%22%3a%22fa6f3ea6-e55a-4beb-b079-9f8561eb1cd6%22%7d https://www.microsoft.com/en-us/microsoft-teams/download-app https://www.microsoft.com/microsoft-teams/join-a-meeting n ORLANDO INTERNATIONAL AIRPORT I M.3/ 0 0 PEN 6 0 v '--w#

E-Procurement Platform

The Greater Orlando Aviation Authority’s Purchasing Department has transitioned to a new E-Procurement Platform OpenGov, effective April 3, 2023. New solicitations will be posted with OpenGov and electronic responses will be accepted via the e- Procurement Portal.

To access new solicitations, visit https://procurement.opengov.com/portal/goaa to get started, click here to sign up. You will receive an email to activate your account.

For more information about how to register, please see our help file here.

Registration and Notification of Solicitations

THERE IS NO COST FOR VENDORS TO REGISTER WITH OPENGOV

Receiving Electronic Responses to Bids/Responses

To successfully submit a response to a solicitation, Vendors are required to submit their electronic response via OpenGov - https://procurement.opengov.com/portal/goaa. Mailed, faxed, emailed, and hand delivered submissions will not be accepted. Responses will only be accepted via OpenGov. By way of the e-Procurement Portal, responses will be locked and digitally encrypted until the submission deadline passes.

24-101-RFP-PS IT CONTINUOUS CONSULTING SVCS BASE REV 7/1/2023

https://procurement.opengov.com/portal/goaa https://procurement.opengov.com/signup http://help.procurement.opengov.com/en/articles/2482165-vendor-registration https://procurement.opengov.com/signup https://procurement.opengov.com/portal/goaa

Table of Contents E-Procurement Platform Receiving Electronic Responses to Bids/Responses

AMERICANS WITH DISBAILITIES ACT

1.0 GENERAL INFORMATION

1.1 Intent and Purpose

1.2 Objectives

1.3 Background Information

1.4 Solicitation Information

1.5 Submitting Questions and Receiving Responses

1.6 Communications; Questions Regarding Specifications or Response Process

1.7 Withdrawal of Responses

1.8 Notice of Intent to Award Agreement

1.9 Public Meetings/Public Records

1.10 Independent Consultant Status and Compliance with the Immigration Reform and

Control Act

1.11 Code of Ethics and Business Conduct Policy

1.12 Exceptions to Terms and Conditions within the SOLICITATION

1.13 Waiver and/or Rejection of Irregular Request for Responses

1.14 Lobbying Statement

1.15 Proprietary Information

2.1. SCOPE OF SERVICES

2.2. Research

2.3. Concepts Development:

2.4. Business Case Development:

2.5. Requirements Development:

2.6. Operational Readiness:

2.7. Project Management (PM) And Owner Authorized Representation (OAR):

2.8. Resource Acquisition:

2.9. Maintenance:

2.10. Operations:

2.11. Planning:

2.12. Policies And Procedures:

2.13. Disaster Recovery And Business Continuity Plan (BCP):

2.14. Security:

2.15. Related Services:

2.16. Technologies:

2.17. Current Commercial Products in Use by the Aviation Authority

2.18. Additional Services

24-101-RFP-PS IT CONTINUOUS CONSULTING SVCS BASE REV 7/1/2023

2.19. Non-Exclusive Services

3.0 RESPONSE REQUIREMENTS

3.1 Respondent’s Mandatory Requirements

3.2 Evaluation of Submittals

3.3 Selection Process

3.4 Insurance Requirements

3.5 Small Business Action Plan and Participation

3.6 Good Faith Effort for MWBE Participation Program

3.7 Verification of Employment Status

4.0 SUBMISSION REQUIREMENTS

4.1 Preparing Responses in Required Format

Tab 1 - Table of Contents Tab 2 - General Company Information Tab 3 - Respondent’s Experience and Qualifications Tab 4 Knowledge and Experience of Key Individuals and Team Tab 5 - Approach and Methodology Tab 6 - Additional Requirements of the Response Tab 7 - Schedule of Fees Tab 8 - Information Technology Functional Requirements and Capabilities Matrix Tab 9 - Additional Information If needed

1. Respondent’s Certification Form

2. Addendum Receipt Verification

3. Conflict of Interest Disclosure Form

4. Certification Regarding Prohibition Against Contracting with Scrutinized

5. E-Verification Certification Form

6. MWBE FORMS

7. Current W9

8. No Response Exhibit 1 FORM OF PROFESSIONAL SERVICES AGREEMENT

1. Services to be Provided by Consultant

2. Compensation

3. Term and Termination

4. Warranties and Representations of Consultant

5. Member Protection: Waiver

6. Indemnification

7. Insurance

8. Compliance with Nondiscrimination Requirements

9. Title VI List of Pertinent Nondiscrimination Acts and Authorities

10. Federal Fair Labor Standards Act

11. Occupational Safety and Health Act of 1970

12. Whistle Blower Reporting Line

13. Florida Law

14. Remedies

15. Attorney’s Fees and Costs

16. Venue and Waiver of Jury Trial

17. Transfers, Assignments and Subcontracts

18. Miscellaneous Provisions

19. Entire Agreement

20. Amendment; Waiver

21. Severability

22. Time is of the Essence

23. Execution and Counterparts

24. Notices Exhibit “A” – Scope of Services

1.1. Research

1.2. Concepts Development:

1.3. Business Case Development:

1.4. Requirements Development:

1.5. Operational Readiness:

1.6. Project Management (PM) And Owner Authorized Representation (OAR):

1.7. Resource Acquisition:

1.8. Maintenance:

1.9. Operations:

1.10. Planning:

1.11. Policies And Procedures:

1.12. Disaster Recovery And Business Continuity Plan (BCP):

1.13. Security:

1.14. Related Services:

1.15. Technologies:

1.16. Current Commercial Products in Use by the Aviation Authority

1.17. Additional Services

1.18. Non-Exclusive Services

Exhibit “B” – Schedule of Fees

AMERICANS WITH DISBAILITIES ACT

The Greater Orlando Aviation Authority does not discriminate upon the basis of any individual’s disability status. Anyone requiring reasonable accommodations as provided for the Americans with Disabilities Act (ADA) or Section 86.26, Florida Statutes, should contact the Aviation Authority’s ADA Coordinator at 407-825-2006 as soon as possible, at least one full business day prior to any scheduled meeting.

1.0 GENERAL INFORMATION

a. The Greater Orlando Aviation Authority (Aviation Authority) is soliciting interested parties to perform information technology continuing consulting services for the Aviation Authority at the Orlando International Airport.

b. The Agreement period, if an Agreement is awarded following the Solicitation process, will be for five (5) years, with the initial service to commence on or about February 1, 2024. The agreement between the successful Respondent and the Aviation Authority will be non-exclusive.

1.1 Intent and Purpose

a. It is the intent of the Aviation Authority that a Respondent will provide the services specified in the Scope of Services detailed in Section 2.0. The Aviation Authority intends to select the Respondent that it deems to be the most highly qualified, responsible, and responsive to the Aviation Authority to perform the required services after considering the evaluation criteria, in its exclusive discretion.

1.2 Objectives

The selected Respondents shall provide, for and on behalf of the Aviation Authority, information technology consultant services for the Aviation Authority Information Technology department.

1.3 Background Information

a. The Aviation Authority expects more than 54.4 million domestic and international passengers will travel through the Orlando International Airport (MCO) during the 2022-2023 fiscal year.

b. As of January 2023, MCO is served by 34 commercial airlines and six cargo carriers. In January 2022, the Airport was served by 30 commercial airlines and seven cargo carriers.

c. MCO, like all airports in the United States, is self-sustaining, with airport revenues being generated from user fees, concessions, and airline revenues. No local taxpayer dollars contribute to the operation of MCO.

1.4 Solicitation Information

a. Sealed electronic responses will be received for this solicitation through the Greater Orlando Aviation Authority e-Procurement Portal located at https://procurement.opengov.com/portal/goaa. By way of the e-Procurement Portal, responses will be locked and digitally encrypted until the submission deadline passes.

24-101-RFP-PS IT CONTINUOUS CONSULTING SVCS BASE REV 7/1/2023

b. Responses submitted by hard copy, e-mail, telephone or fax shall not be accepted. Responses submitted outside of the designated electronic submission portal shall be rejected as non-responsive regardless of where received.

c. The Aviation Authority shall not be responsible for delays caused by any occurrence, to include a result of a technology issue are still considered late and shall not be accepted.

d. The time/date stamp clock located in the electronic submittal portal shall serve as the official authority to determine lateness of any response.

e. Vendors shall not be allowed to modify their Reponses after the opening time and date. Responses may be examined thirty (30) days after the solicitation opening or upon recommendation for award, whichever occurs first.

1.5 Submitting Questions and Receiving Responses

Respondents shall submit all inquiries regarding this Solicitation via the e- Procurement Portal, https://procurement.opengov.com/portal/goaa. Please note the deadline for submitting inquiries. All answers to inquiries will be posted on the Aviation Authority e-Procurement Platform. Respondents may also click “Follow” on this Solicitation to receive an email notification when answers are posted. It is the responsibility of the Respondent to check the website for answers to inquiries.

a. If a Virtual and/or Pre-Response Conference is held, please see the Cover Page of this solicitation for the location, date, and time. The purpose of any Pre-Response Conference is to review and discuss the solicitation (and any addenda) as published. Attendance is not mandatory but is highly encouraged.

Bidders are expected to be familiar with the Solicitation Documents.

b. If the Purchasing Department determines that it is necessary to change the dates or times prior to the due date, the change will be announced and posted on the e-Procurement Portal

c. All prospective Respondents shall thoroughly examine and become familiar with the Solicitation package and carefully note the items, which must be submitted with the Solicitation as detailed in Section 4, Response Submittals.

d. Submission of a Response shall constitute an acknowledgment that the Respondent has read and understands the Solicitation Documents. The failure or neglect of a Respondent to receive or examine any Solicitation Document shall in no way relieve it from any obligations under its Response or the Contract. No claim for additional compensation will be allowed which is based upon a lack of knowledge or understanding of any of the Contract Documents or the scope of work.

e. Unless otherwise noted, Respondents shall submit one Response only.

24-101-RFP-PS IT CONTINUOUS CONSULTING SVCS BASE REV 7/1/2023

1.6

1.7

1.8

Communications; Questions Regarding Specifications or Response Process

a. All communication and contact regarding this solicitation shall be made via the e-Procurement Portal, https://procurement.opengov.com/portal/goaa.

b. Any official communication from a Respondent during the Solicitation process should be submitted in writing to the Aviation Authority to the email address as directed during the Proposal process. A copy of the Administration Policies (Sections 180.01 and 180.03) are available upon request from the Manager of Board Services.

c. In accordance with the above-referenced policies, any communication directly or indirectly to seek to encourage any specific result in connection with an Aviation Authority selecting process, including but not limited to, written communications, any and all forms of electronic communications or messaging, including social media, oral communications either in person or by telephone, initiated by a Proposer or through a lobbyist, agent or third person, to any Aviation Authority staff and/or Committee/Board member who is a member of any committee constituted for the purposes of ranking Solicitations, making recommendations or making an award, is prohibited from the time that the Solicitation is released to the time that the award is made.

Withdrawal of Responses

No Response may be withdrawn after the scheduled Response opening time for a period of ninety (90) days. Any Respondent withdrawing or attempting to withdraw its Response prior to the expiration of the 90 day period shall be obligated to reimburse the Aviation Authority for all its costs incurred in connection with such withdrawal or attempted withdrawal including, without limitation, any increased costs for procuring the goods or services from another Respondent or all costs of advertising and re-procuring the goods or services, and all attorneys’ fees, in addition to payment of the Aviation Authority’s other damages.

A Respondent’s submission shall be deemed the Respondent’s acknowledgment of an agreement to the provisions of this Section.

Notice of Intent to Award Agreement

Unless all Responses are rejected by the Aviation Authority, a Notice of Intent to Award is anticipated to be provided within ninety (90) days from the opening of Responses to the responsible and responsive Respondent submitting the Response deemed to be most advantageous to the Aviation Authority, all factors being considered. For all procurements, the Aviation Authority reserves the right to reject any or all Responses and to cancel the procurement or to solicit new Responses.

The Aviation Authority intends, but is not obligated, to enter into a non-exclusive agreement with the highest ranked Respondent to perform the required Services described herein. The Aviation Authority reserves its right to award any or all of the advertised services subject to the availability of funding.

BASE REV 7/1/2023

24-101-RFP-PS IT CONTINUOUS CONSULTING SVCS

1.9 Public Meetings/Public Records

Please be aware that all meetings of the Aviation Authority’s Board are duly noticed public meetings and all documents submitted to the Aviation Authority as a part of or in connection with a Response will constitute public records under Florida law regardless of any person’s claim that proprietary or trade secret information is contained therein.

1.10 Independent Consultant Status and Compliance with the Immigration Reform and Control Act

Respondent is and shall remain an independent Consultant and is neither agent, employee, partner, nor joint venture of Aviation Authority. Respondent acknowledges that it is responsible for complying with the provisions of the Immigration Reform and Control Act of 1986 located at 8 U.S.C. 1324, et seq. and regulations relating thereto, as either may be amended from time to time. Failure to comply with the above provisions shall be considered a material breach of the Agreement.

1.11 Code of Ethics and Business Conduct Policy

The Aviation Authority has adopted a Code of Ethics and Business Conduct Policy (Section 204.01) which addresses, the obligation of the Aviation Authority’s Board members and employees to follow the Florida Statutes in reference to these issues.

This includes, but is not limited to, the obligations of the Aviation Authority’s Board members and employees with respect to having an interest in business entities, outside employment, gratuities, divulgence of information, unauthorized compensation and acceptance of gifts.

Please be aware that any violation of this policy by a Respondent and/or any attempt to influence an Aviation Authority Board member or employee to violate the policy is sufficient cause for the denial of the right of the Respondent to Response on any Contract or sell any materials, supplies, equipment, or services to the Aviation Authority for a period of time that is determined by the Chief Executive Officer. A copy of this policy is available upon request from the Chief Administrative Officer.

1.12 Exceptions to Terms and Conditions within the SOLICITATION

If the Respondent desires to take exception(s) to any portion of the terms and conditions of this Solicitation, the exception(s) must be taken during the question and answer period, and response will be included in an Addendum. Exceptions noted within the response submittal will cause the response to be deemed non-responsive. Respondents shall not substitute entire agreements or sets of terms and conditions but discuss separately each term or condition that they take exception to or desire to change.

1.13 Waiver and/or Rejection of Irregular Request for Responses

The Aviation Authority reserves the right to waive informalities or irregularities in any Responses, to reject any or all Responses in whole or in part, with or without cause, and to accept that Response, if any, which in its judgment is deemed to be responsible and responsive, and in its sole discretion is deemed the most advantageous to the Aviation Authority to perform the required services after considering the evaluation criteria.

1.14 Lobbying Statement

All firms are hereby placed on notice the Aviation Authority Board and staff shall not be contacted about this Response. Firms and their agents are hereby placed on notice that they are not to contact members of the Aviation Authority staff and/or Committee/Board member (with the exception of designated Purchasing Liaison).

Public meetings and public deliberations of the Selection Committee are the only acceptable forum for the discussion of merits of products/services requested by the Request for Response; and written correspondence concerning Solicitation’s may be submitted to the Purchasing Department. An appropriate official or employee of the Aviation Authority may initiate communication with a Respondent in order to obtain information or clarification needed to develop a proper and accurate evaluation of the Solicitation. Any official communication from a Respondent during the Solicitation process should be submitted in writing to the Greater Orlando Aviation Authority, GOAA Annex Building, Purchasing Department, 5855 Cargo Road, Orlando, FL 32827-4399 or via the e-Procurement Platform as directed during the Solicitation process. A copy of the Administration Policies (Sections 180.01 and 180.03) are available upon request from the Chief Administrative Officer. Failure to adhere to these requirements could result in Board action to disqualify your firm from consideration of award.

Respondents to this Solicitation or persons acting on their behalf may not contact, between the release of the solicitation and the end of the seventy-two (72) hour period following the agency posting the notice of intended award, excluding Saturdays, Sundays, and state holidays, any employee or officer of the executive or legislative branch concerning any aspect of this solicitation, except in writing to the procurement officer or as provided in the solicitation documents. Violation of this provision may be grounds for rejecting a response. (F.S. 287.057 (23))

1.15 Proprietary Information

a. In accordance with Chapter 119 of the Florida Statutes (Public Records Law) and except as may be provided by other applicable State and Federal Law, all Respondents should be aware that the Solicitation and the responses thereto are public records. However, the Respondents are requested to identify specifically any information contained in their Response, which they believe to be exempt from disclosure, citing specifically the applicable exempting law.

The Aviation Authority will consider a Respondent’s opinions regarding the applicability of Chapter 119, Florida Statutes, but shall not be obligated to concur in such opinions.

b. All information and documents received from Respondents in response to this Solicitation will become the property of the Aviation Authority, will not be returned to the Respondents, and will be incorporated in the final Agreement in the event of Agreement award, with the exception of any financial information exempt from the Public Records Laws. Any work product produced as part of the Agreement will become the exclusive property of the Aviation Authority.

The remainder of this page is intentionally blank.

2.1. SCOPE OF SERVICES

The Aviation Authority is seeking one or more Information Technology (IT) Consultants to provide a broad range of services associated with the planning and implementation of IT projects and initiatives that are identified in the Aviation Authority’s Capital Improvement Plan (CIP), Information Technology Master Plan (ITMP), the Aviation Authority’s annual project planning process, and other IT projects and initiatives requested by the Aviation Authority. The Services may include project management; staff augmentation; research of specific technologies; research and concept development; IT business analysis; business case development;

infrastructure and applications design, installation, configuration, development and testing; database management and administration; cyber and physical security;

development of solicitation documents; functional, performance and interface requirements definition and documentation project planning; applications development, implementation and integration across multiple systems; operations and management of IT; assistance with IT roadmap or strategic plans; vendor and product evaluations and recommendations and other IT consulting services.

2.2. Research

The Consultant must conduct directed research on technologies and their uses or potential uses, and document the findings and conclusions; commercial products (hardware, firmware, and software) and services that incorporate those technologies, including fit for purpose, limitations, issues, and probable total cost of ownership; and related government and industry standards and best practices, methods, regulations, and policies. The Consultant must plan, execute, monitor, and document discoveries and conclusions from hands-on evaluations and demonstrations of services and products to determine the probable fit for the intended purpose or to determine compliance with pre-qualification requirements. Such evaluations and demonstrations must be performed in Consultant laboratories, independent laboratories, the Aviation Authority IT laboratories, or specific circumstances, in product source laboratories in a structured, controlled, and monitored environment.

2.3. Concepts Development:

The Consultant must develop and document solution options to meet the needs (e.g., functional, performance and interface requirements) of the enterprise at a conceptual level, but sufficient to describe possible commercial product and service components, custom designed and developed components, their inter-relationships, and an allocation of requirements to those components. Solution options and risks must also be defined.

2.4. Business Case Development:

The Consultant must develop and document a business case for each concept chosen for additional consideration to include: business impact assessment; technical infrastructure impact assessment, including impacts due to fail-operational and cyber-security requirements; risks assessment; credible implementation timeline; cost-benefits assessment that must address both direct and indirect project costs and benefits (including Return-On-Investment (ROI), Internal Rate-of-Return (IRR), and intangible benefits).

2.5. Requirements Development:

a. Once a concept is selected for implementation and funded, the Consultant must develop and document complete functional, performance, and interface requirements, dependencies and limitations (e.g., financial, regulatory, technical, operational), and re-assess and amend the business case) above to reflect the additional information developed in this phase. Then the Aviation Authority will decide between one of the following approaches:

1) The Aviation Authority Personnel only.

2) The Aviation Authority and Consultant Personnel.

3) Consultant Personnel only.

4) Competition among Consultants.

5) Competition among Non-Consultants.

b. Factors to be considered in establishing the preferred approach include but are not limited to the resources the Aviation Authority or the Consultant can allocate to the effort at the time needed and dollar thresholds defined elsewhere. The services the Consultant must provide during the design, development and test phase for each approach are delineated in subsequent paragraphs.

1) The Aviation Authority Personnel Only: Provide assistance on an as needed basis.

2) The Aviation Authority and Consultant Personnel: The Consultant must provide qualified personnel to assist (augment) the Aviation Authority personnel with: definition of design requirements; design specification definitions; development of custom firmware; development of software;

report development; acquisition of commercial software, firmware and hardware; installation, configuration and integration of commercial and custom developed products; unit, subsystem and system verification and validations testing; problem determination and resolution; and production of related documentation.

3) Consultant Personnel Only: The Consultant must submit a proposal to provide qualified personnel to perform the services described above in

(2) in an independent, Consultant-responsible manner.

4) Competition among Consultants: Two (2) or more Consultants must respond to an Aviation Authority request for proposal based on the functional, performance and interface requirements listed above in option two (2). The selected consultant must also perform the services described above in option two (2) in an independent, Consultant-responsible manner.

NOTE: In reference to option (3) and (4) above the role of the Aviation Authority will be one of a client; primarily in a review and approval role.

5) Competition among Non-Consultants: In cases of open competition from which the Consultants are excluded, the chosen Consultant must prepare or assist the Aviation Authority in the preparation of all documents required for the open competition and provide professional advice.

2.6. Operational Readiness:

The Consultant must perform or assist in performing those services required to bring a solution developed in the cases described above or acquired into an operational state, including but not limited to: readiness of facilities, systems and equipment; staff augmentation; training of the Aviation Authority IT personnel; and training of end users.

2.7. Project Management (PM) And Owner Authorized Representation (OAR):

The Consultant must be able to provide qualified personnel for PM and OAR services for IT projects or for IT portions of non-IT projects. These services include but are not limited to monitoring and reporting on compliance with resource allocations, schedules, technical and business issues and partner issues, and assistance in resolution of issues.

2.8. Resource Acquisition:

The Consultant must provide qualified personnel to assist in development of statements of need, rationale and methods for acquiring IT resources (e.g., facilities, systems, equipment, funds, personnel) needed to meet IT demands and commitments for services. Personnel acquisition assistance would include preparation of job descriptions and postings, review of resumes, interviews to validate qualifications, and support as requested during in-person interviews.

2.9. Maintenance:

The Consultant must be able to provide qualified personnel to assist in the operation of in-place systems, subsystems and applications, including but not limited to the installation and testing of software and firmware patches and releases, software and firmware version control, preventive and corrective hardware and software maintenance, and removal and repair or replacement of hardware. These in-place systems, subsystems and applications include but are not limited to the major items identified in Section 2.16 (Current Commercial Products) below.

2.10. Operations:

The Consultant must be able to perform the operation of in-place systems and subsystems, including but not limited to re-location, configuration, start-up, shutdown, backup, diagnostics and function and performance data collection, and other operational functions as an extension of the Aviation Authority IT Department personnel. These systems and subsystems include but are not limited to those identified in Section 2.16 (Current Commercial Products) below.

2.11. Planning:

The Consultant must be able to provide qualified personnel to create and update: IT Master Plans and Roadmaps; IT inputs to Airport Strategic, Master, and Improvement Plans; IT inputs to Facilities, Systems and Equipment Integration and Test Plans; and all other plans that require IT input.

2.12. Policies And Procedures:

The Consultant must provide qualified personnel to: draft and revise policies and procedures related to the services described within this document, monitor standards development, and monitor appropriate adoption of these items into policies, procedures and products.

2.13. Disaster Recovery And Business Continuity Plan (BCP):

The Consultant must provide personnel to assist in the development, updating and testing of requirements for the Aviation Authority’s Disaster Recovery Plan and BCP components. This expertise will extend to those applications used to track plan components and should include experience with NFPA 1600, ISO 24762, and current techniques for disaster recovery and business continuity planning.

2.14. Security:

The Consultant must provide personnel to assist with ongoing security assessment and monitoring activities, security metrics, systems and application hardening and configuration, development of security policies, adherence to compliance standards such as PCI DSS, HIPAA, state and federal law, and internally driven regulatory requirements. Expertise must include vulnerability assessment, penetration testing, risk assessment, incident response, security mitigations, log management, forensic analysis for incident artifacts, and other activities in alignment with industry best practices.

2.15. Related Services:

Due to the rate of change in technologies, products and services, it is not possible to delineate each service that could be required during the term of the Agreement, including services that could be introduced during the term. The Consultant must be able to respond to change and describe their approach to maintaining or acquiring the expertise needed. The intent is to include such changes and introductions in services in the scope of this Agreement.

2.16. Technologies:

The term Technologies means the science, hardware and software systems, and equipment and components that incorporate the technologies.

a. Wireless technologies including both licensed and unlicensed bands for use in customer service, passenger processing, way finding, advertising, location-based services, queue management, network infrastructure redundancy, operations and airfield management, and other functions as needed.

b. Video technologies and analytics for security, passenger flow monitoring and modeling including but not limited to interactive multilingual video and voice on monitors and smart mobile devices for customer assistance and information, including way finding, parking and transportation, advertising, paging and visual paging.

c. Digital media content development including live data interfaces and interactive experiences displayed across variable digital canvas sizes.

d. Unified Communications technologies including but not limited to MS Exchange, MS Teams, video conferencing, Presence Services, language translation, digital messaging, remote agent information kiosk, and IP-PBX systems.

e. Airport information management technologies for airport operational management, reporting, and planning including but not limited to: airport operations and safety compliance, airport resource allocation and management, and airline flight information interfacing and displays.

f. Content and records management technologies for the storage, distribution and collaboration of documents along with related process automation via business process applications.

g. Parking technologies for revenue control, parking space monitoring, parking guidance, parking reservations, and method of payment.

h. Mobile technologies for customer service, airport operations, and other purposes.

i. Application development technologies for: Microsoft, Oracle, Web, iOS, Android and Angular platforms.

j. Business intelligence technologies providing: real-time situational awareness for operations; near real-time operations performance and financial management; operations simulation and monitoring; historical trend and predictive analysis using various reporting, data warehouse, data lakes, big data and data science tools.

k. IT systems and equipment monitoring and management technologies providing: proactive notification of risks and faults, security threats, automated resolution of potential faults, notification and reporting of system performance.

l. Building Information Management (BIM) system technologies including but not limited to: generation and management of 3D digital representations and modeling of physical and functional characteristics of a facility.

m. Geospatial technologies, including GIS, CAD, BIM and GPS for AC150 compliance, rates and charges, campus addressing, various map book creation, collaboration and distribution of maps and data both via intra and extranet architectures.

n. Information security processes, technologies, systems, and applications including but not limited to: monitoring / management of firewalls, intrusion prevention, vulnerability management and penetration testing, and compliance with Payment Card Industry (PCI) requirements and other security and privacy standards. Provide services to develop, implement, and enforce security policy.

o. Building automation and management system technologies for monitoring, management, and performance reporting for: elevators/escalators, UPS and generators, fire detection and alarm systems, HVAC, low voltage and electrical systems, lighting control, and other technologies as needed.

p. IT infrastructure technologies support including but not limited to: computer room design, physical and virtual servers, storage devices, communications devices, computer room HVAC and UPS, and copper and fiber optic cabling.

q. Airport trunk radio technologies and systems.

r. Passenger and baggage processing technologies including: self-service baggage check and boarding control, baggage tracking, rebooking, biometric identification, passenger movement sensors, and others as processing technologies evolve and are adopted.

s. Patron loyalty program technologies to enhance customer services to frequent parkers, frequent shoppers, and other repeat customers.

t. Point-of-sale technologies and integration.

u. Computer-based training technologies.

v. Asset life cycle management technologies for facilities, systems, equipment, and software.

w. System and data integrations using Service Orientated Architecture (SOA), Application Programmable Interface (API) Technologies, and Airport Application centric Point to Point interfaces following IATA and ACI best practices that include but are not limited to: Oracle SOA Suite, API management solutions, REST, SOAP, XML, and JSON.

x. Internet of Things (IoT) hardware, software, and system technologies and interfaces, standards and best practices.

2.17. Current Commercial Products in Use by the Aviation Authority

1. Oracle Financial Applications, including e-Business Suite and Oracle Fusion Middleware

2. Oracle Planning and Budget

3. Oracle Database + Dataguard

4. Oracle OBIEE

5. Oracle SOA Suite

6. Oracle WebLogic

7. SplashBI Reporting

8. Amadeus PROPworks

9. UKG Workforce Central

10. UKG Telestaff

11. ESRI ArcGIS, Portal & Mobile Apps On-Premise and On-Line

12. Autodesk AutoCAD, Collaborate Pro & Revit

13. IBM Maximo

14. IBM WebSphere

15. Prometheus DataSplice

16. SITA Com-Net Multi User Flight Information Display System (MUFIDS)

17. Skidata and GateKeeper Parking Revenue Control System

18. SITA Common Use Passenger Processing (CUPPS)

19. SITA Common Use Self-Service (CUSS)

20. SITA Biometric E Gates

21. Queue Management System

22. Veovo Resource Management System

23. VRC/VDGS/VIBES (STC BHS) – do we need to list these?

24. Fire Alarm Monitoring

25. Motorola RF Communications

26. Jervis B. Webb/Siemens Baggage Handling System(s)

27. MC2/Schneider Electric Building Operating System – Lighting and HVAC monitoring and control

28. Eaton Power Xpert Electrical Power Monitoring

29. Siemens Airfield Solution/ADB airfield lighting system

30. Schindler LiftNet Elevator Management System

31. Bombardier and Mitsubishi Automated Ground Transportation (AGT) monitoring and control

32. Softwarehouse CCure Access Control System (ACS)

33. HID SAFE physical identity management System

34. Qognify (Nice) Video Management Systems, Digital Video Recording

Systems and Situator / PSIM

35. IED Paging System

36. Civix Airport IQ Operations Centers

37. SSI ASSP computer based training

38. Avaya PodFx

39. Avaya CM

40. Avaya Aura Messaging

41. Avaya Experience Portal

42. Avaya Aura Conferencing

43. Mutare Message Mirror

44. Mutare Voice Forms

45. Microsoft Azure Services and M365 Suite

46. Microsoft Certificate Services

47. Microsoft Defender for Endpoint

48. Microsoft Exchange Services

49. Microsoft SharePoint On-Premise and On-Line

50. Microsoft SQL Server

51. DH2i DX Enterprise

52. Microsoft System Center Configuration (SCCM) & Operations Manager

(SCOM)

53. Microsoft Internet Information Services (IIS)

54. Mobile Device Management Services (Airwatch)

55. Microsoft Windows Operating System servers, including clusters, virtual servers and blade servers

56. Netplus Telemanagement System

57. Linux based servers

58. Juniper and Palo Alto Software for intrusion prevention, detection, correction and reporting (e.g., Intrusion Prevention Systems (IPS) and firewalls)

59. F5 Load Balancer/applications delivery controller

60. Cisco core switches

61. Cisco edge switches

62. Cisco security platforms

63. Aruba 802.11 wireless controllers, Clearpass, location engine, access points, and beacons

64. HPE Meridian platform and SDK

65. Solar Winds performance monitoring and trends, control and diagnostics

66. ServiceNow IT Asset and Work Management, and Governance, Risk and

Compliance (GRC)

67. Salesforce Service Cloud

68. K2 Blackpearl

69. Contentful CMS

70. WordPress

71. YCD Cnario digital signage products

72. Synect multi monitor content creation, management and delivery systems

73. Native iOS and Android platform development

74. Angular development platform

75. Splunk (Enterprise, Security, UBA, Cloud)

76. Rapid7 Nexpose, Metasploit Pro

77. ProofPoint

78. CyberTriage Incident Response System

2.18. Additional Services

If during the contractual period additional services are needed, the selected Proposer, also referred to as Consultant may, at the option of the Aviation Authority, be engaged to perform additional services. The selected Consultant, shall upon receipt of the written request from the CEO, perform such additional services based upon the hourly rates in the Professional Services Agreement. All additional work will be documented by amendment to be approved following the Aviation Authority policies prior to the performance of any additional services.

2.19. Non-Exclusive Services

This is a non-exclusive Agreement. During the term of this Agreement, and any extensions thereof, the Aviation Authority reserves the right to contract for another provider for similar services as it determines necessary in its sole discretion.

The remainder of this page is intentionally blank.

3.0 RESPONSE REQUIREMENTS

3.1 Respondent’s Mandatory Requirements

Respondents must meet the following minimum requirements to be considered for the award of the contract. Respondents will address each requirement specifically in their Response. Each Respondent must acknowledge on company letterhead and provide written documentation that their firm meets the Requirements.

a. Respondent must be registered/qualified to do business in the State of Florida.

Provide a copy of such registration/qualification to the Aviation Authority with the Response submission.

b. Respondent shall have a minimum of five (5) years’ experience providing services of the type described in the Scope of Services above. Respondent shall provide an affirmative statement and/or documentary proof of such experience with the Response submission.

c. Proposers and associated team members must demonstrate that they are able to perform a variety of assignments and tasks as described in Attachment “A” – Compliance Expertise Matrix.

d. Return of Required Response Forms to include Proof of Insurance.

1. Response Forms to be turned in to the Aviation Authority

The Response forms, (1 through 9) shall be completed and signed by the Respondent’s duly authorized representative. Failure to return the forms with the submittal may cause the Response to be deemed as non-responsive.

2. Proof of Insurance

The submittal shall contain proof of insurability issued by a company currently authorized to do business in the State of Florida and with an A.M.

Best Company rating of at least B+ and a Financial Size Category of "Class VI" or higher according to the most current edition of AM Best Rating for the required insurance(s) listed in Section 3.4 Insurance Requirements.

e. Respondents must provide the most recent audited annual financial statements for the last two years in order to evaluate the Respondent’s ability to perform these Services. If audited annual financial statements are not available, provide balance sheets, income statements, and cash flow statements for the last two years.

This financial documentation shall be uploaded as a separate attachment via the e-procurement platform and be clearly labeled as follows: "Confidential

Financial Records Submitted under Seal and Exempt from Florida Public Records Disclosure.” (Reference Florida Statutes Section 119.071(1)(c) for exemption on financial records.)

f. Respondent shall affirm their willingness to execute an agreement substantially in the form attached hereto as Exhibit 1 - Form of Professional Services Agreement.

3.2 Evaluation of Submittals

a. Respondent(s) must meet the requirements as stated in Section 3.1 and demonstrate the capability required to provide the services described in Section

2.0 Scope of Services.

b. Responses will be evaluated using the following criteria:

EVALUATION CRITERIA

CATEGORY POINTS

Experience and Qualifications of Respondent; Successful Completion of Similar Projects and References. 35

Knowledge and Experience of Key Individuals and Team 35 Approach and Methodology: Ability to provide the requested services. 10

Additional Requirements of the Response (Prior or Pending Convictions, Indictments, Investigations, Claims, and MWBE Participation Goal Level).

Price Response/Cost Response schedule. 10

TOTAL 100

c. The Aviation Authority, in its sole discretion, may award the Contract to the responsible and responsive Respondent submitting the Response, which is deemed the most advantageous to the Aviation Authority, price and other factors being considered.

d. Respondent is hereby notified that Section 287.05701, Florida Statutes, requires that the Aviation Authority may not request documentation of or consider a vendor's social, political, or ideological interests when determining if the vendor is a responsible vendor.

e. The Aviation Authority reserves the right to solicit from available sources relevant information concerning a Respondent’s past performance and may consider such information in its evaluation and selection of Respondents.

3.3 Selection Process

a. Responses to this Solicitation will be evaluated by the Committee based upon the Evaluation Criteria per Section 3.2 and as supported by the Respondent has provided all required information per Section 4.0 Response Submission Requirements. The recommendation of the Committee will be considered by the Aviation Authority Board for award.

b. The Committee will evaluate the responses and may, at its discretion, invite one or more of the Respondents that appear to be the most advantageous to the Aviation Authority to perform the requested services to present/interview with the Committee. The purpose of such an interview would be to allow Respondents to elaborate upon their Response before a recommendation for ranking of the Responses is made. Interviews, along with the written Response will become part of the Respondent’s response to be evaluated by the Committee.

c. The Committee may conduct a presentation and interview session with each of the short-listed Respondents. Following presentations/interviews, or in the event Committee determines that presentations/interviews are not necessary, the Committee shall make a final ranking and select in order of preference, in order to make a recommendation to the Aviation Authority’s Board, the responsible, responsive, and in its sole discretion, most advantageous to the Aviation Authority to perform the requested services.

d. The Aviation Authority shall have the right, but not the obligation, to award all or any portion of the services. The extent and scope of the Services, along with the fees for such services, will be subject to final approval by the Aviation Authority.

The Aviation Authority intends, but is not obligated, to enter into a non-exclusive agreement with the highest ranked Respondent to perform the required Services described herein. The Aviation Authority reserves its right to award any or all of the advertised services subject to the availability of funding.

e. The Aviation Authority reserves the right to waive any informality in the Solicitations, to reject any or all Solicitations, and to re-advertise or elect not to proceed with the services for any reason.

f. All recommendations and decisions regarding award of the services shall be made at open public meetings in accordance with the requirements of Florida Statute 286.011, and all interested parties are invited to attend such meetings. The meetings of the PC and Aviation Authority Board are public meetings.

g. All parties desiring information regarding the award of the Contract may visit http://Orlandoairports.net

24-101-RFP-PS IT CONTINUOUS CONSULTING SVCS BASE REV 7/1/2023

http://orlandoairports.net/

3.4 Insurance Requirements

At its sole expense, the Consultant shall maintain the following insurance during the term of this Agreement, including any extensions or renewals and such insurance will apply to Consultant, its employees, agents, and subcontractors.

a. General Liability and Automobile Liability:

1. Commercial General Liability insurance covering any and all claims for property damage and bodily injury (including death) and including, but not limited to premises, products and completed operations, and contractual liability for Consultant’s covenants, with a limit of liability not less than One Million Dollars ($1,000,000) per occurrence; and

2. Automobile liability insurance covering each motor vehicle, including but not limited to owned, non-owned, or hired, used in conjunction with providing Services on Authority property resulting in property damage or bodily injury, including death with a limit of not less than Three Hundred Thousand Dollars ($300,000) combined single limit per accident;

b. Additional Insured Endorsement. Such above referenced liability insurance shall name Authority and the City and their members (including, without limitation, members of the Authority’s Board and the City’s Council and members of the citizens’ advisory committees of each), officers, employees, and agents as additional insureds.

c. Workers’ Compensation and Employer’s Liability. The following insurance shall apply to all Consultant’s employees who will be engaged on Authority property in the performances of Services in this Agreement: (i) workers’ compensation insurance with statutory limits in accordance with Florida law, and

(ii) employer’s liability insurance policy limits not be less than $100,000 for each accident, $100,000 for disease each employee and $500,000 for disease policy limit. If the Consultant is self-insured, the Consultant shall provide proof of self-insurance and authorization to self-insure as required by applicable Florida laws and regulations.

d. Professional Services / Errors & Omissions Liability Insurance. Insurance covering Consultant for claims, losses and expenses resulting from wrongful acts or omissions committed in the performance of, or failure to perform, all Services under this Agreement with limits not less than One Million Dollars ($1,000,000) per claim.

e. Other…