6-QA 3.pdf

Q & A_3 26-004

ERATE Email Security Solution

Current Email System Details: The RFP mentions API integration with Microsoft 365, Google Workspace, and "other email platforms".

Could you confirm the primary email platform(s) currently in use (e.g., specific versions of Microsoft 365, Google Workspace editions) and details on any "other email platforms" that require integration? Microsoft 365 A5 and A3

Email Volume and User Count:

What is the approximate number of active email users/mailboxes that this platform needs to secure? 31k What is the estimated daily or monthly volume of inbound and outbound emails that the platform will need to process? We don’t have this data available

Existing Security Solutions: Are there any existing email security solutions currently in place that this new platform will replace or integrate with? Understanding the current stack will help us design a seamless transition. MS Defender

Integration Details: The RFP mentions integration with existing ticketing systems (ServiceNow) and SIEM/SOAR tools.

Could you provide more specific details on the required level of integration with ServiceNow and the specific modules or workflows involved? Vendor to propose what they deem adequate.

For SIEM/SOAR tools, could you identify the specific tools currently in use to ensure compatibility and effective integration? Sentinel

E-rate and Grant Requirements: Both projects are funded by grants and E-rate funds. The RFPs state that offerors must "be able to meet and have an approved process for acceptance" for E-rate and "validate all the grant/Erate requirements if awarded".

Could you please provide more specific details on the documentation or processes required to "validate" these grant and E-rate requirements for selected vendors? This is controlled by the FCC and USAC and can be found on their website.

Given that "Experience With Erate" is a significant evaluation criterion (150 out of 600 total points), what specific types of documentation or examples of past E-rate projects should we provide to demonstrate our experience effectively? Whatever the vendors feels compelled to provide.

Contract Term and Pricing for Renewals: The District intends to sign a contract for "one year with the option of four renewals".

How should we structure our pricing to account for the 3-year subscription service explicitly requested in the Scope of Work for both RFPs, aligning with the one-year term with four renewal options? Should the proposal include pricing for all potential renewal years? Total price for 3 years

Bid Submission Platform: The RFPs state that all submittals are completed via BONFIRE.

Could you confirm if there are any specific guidelines or instructions for file naming conventions or document uploads within the Bonfire portal beyond submitting a PDF document? None

Number of Locations/Users/Endpoints: To provide accurate cost estimates for services like email security and SIEM/SOC/XDR, it's critical to understand the scale of the environment.

Could you provide an approximate count of total staff/users, and the number of physical school locations that these solutions need to cover? 42 physical locations, 31k account For RFP #26-005, a more precise number of endpoints (e.g., workstations, servers) to be monitored would be beneficial for pricing the SIEM/SOC/XDR solution. 35,000

Existing IT Environment Overview: While some systems like ServiceNow are mentioned, a broader understanding of the current IT landscape would be helpful.

Could you provide an overview of the existing IT infrastructure, including network topology, operating systems in use, and any other relevant security tools currently deployed? This would help in planning integrations and potential transitions. WAN with 10Gb fiber links across 42 locations. Cisco switches at the core and for routing at each site, meracki APs and edge switches. Windows Server, Linux Server, Windows 11, MacOS, iOS, ChromeOS. Currently use MS Defender for Endpoint and Cisco ISE for NAC.

Davis Bacon Requirements: The RFPs state that as "a grant funded project so please ensure you will be able to meet Davis Bacon Requirements as required". Could you clarify how Davis Bacon requirements apply to these specific IT service and software subscription RFPs? Any manhour labor would need to follow Bavis Bacon, service chargers do not.

Minority and Small Business Enterprises / Local Laborers: The District has a policy to increase participation by minority and small business enterprises and to utilize minority and local laborers.

Are there specific reporting requirements or forms that bidders need to complete to demonstrate compliance with this policy within the proposal submission? Any pertinent information should be submitted at the discretion of the vendor.