68F5F899-A05E-4DD0-8667-7CCBCB40E787.pdf

City of Columbus, Department Technology Qualys Software Renewal

Detailed Specifications

1.0 SCOPE AND CLASSIFICATION

1.1 Scope: It is the intent of the City of Columbus, Department of Technology to obtain formal bids to establish a contract for the purchase of Qualys software renewal from qualified bidders.

1.2 Classification: The contract resulting from this bid proposal will provide for the purchase and delivery of Qualys software renewal. All Offerors must be formally recognized by Qualys as a certified reseller partner.

2.0 APPLICABLE PUBLICATIONS AND STANDARDS

2.1 Specification Questions: Questions regarding this bid must be submitted on the

Vendor Services portal by 1:00 PM Tuesday, August 18, 2026. Responses will be posted on the RFQ on Vendor Services no later than 1:00 PM Wednesday, August 19, 2026.

2.2 Additional Information: For additional information concerning this bid, including procedures on how to submit a proposal, you must go to the City of Columbus Vendor Services web site at CITY OF COLUMBUS VENDOR SERVICES (columbusvendorservices.powerappsportals.com) and view this bid number.

Instructional video from Columbus Vendor Services is available at:

https://www.youtube.com/channel/UCTIkkGNM7GHIITzoqQVNJlA/videos?shelf_id=0&view=0&sort=dd

2.3 Correspondences: During the bidding and evaluation process, Bidders are strictly prohibited from communicating with any City employees or officers regarding this solicitation except through the method stated immediately above during the Question & Answer Period. Any communication from the bidder to the City after the Question & Answer period should be limited to only what is necessary. Necessary communication required by the City will be communicated clearly to Bidders. If any Bidder has a need to communicate with the City, the communication should be sent to: ITProcurement@columbus.gov. If a City employee attempts to communicate with a bidder contrary to this provision, the Bidder shall report said incident to the ITProcurement@columbus.gov. A violation of this section on the part of the Bidder will lead to disqualification.

3.0 REQUIREMENTS

3.1 General Information:

3.1.1 Term: The term of this agreement shall be from September 16, 2026, to

September 15, 2027. This agreement is not subject to automatic renewal.

https://columbusvendorservices.powerappsportals.com/ https://www.youtube.com/channel/UCTIkkGNM7GHIITzoqQVNJlA/videos?shelf_id=0&view=0&sort=dd

3.1.2 Pricing: The bidder shall submit a firm, fixed unit price for annual software renewal for the Qualys items detailed in this Specification.

3.2 Bidder Requirements: The City will use the requirements of this section to determine if each bidder meets the minimum standards to be considered a responsible bidder. References may be required as well as evidence of authorized deal/reseller partnership. Bidder should be prepared to provide said information upon request.

3.2.1 Software and Support Capabilities: Upon request bidders must document, and submit their capability of providing the equipment and warranty service specified herein.

3.2.2 Manufacturer Relationship: Upon request the bidder shall provide the history of their relationship with manufacturer(s) that will potentially be providing these types of equipment/parts and warranty service for the past five years, including but not limited to the following:

a) Length of the relationship;

b) Level of the relationship;

c) A brief history of the relationship.

3.2.3 References: Upon request the bidder shall have documented proven successful contracts from at least four customers that the bidder supports that are similar in scope, complexity, and cost to the requirements of this specification. Reference contact information shall include the customer name, customer e-mail address, street address, telephone number, fax number, contact name and software purchase date.

3.2.4 Software / Support Information: Upon request the bidder shall provide a description of the entitlements provided.

3.2.5 Subcontractor Information Required: If subcontractor(s) are to be used, please list names, addresses, telephone numbers and a contact person for each subcontractor. All subcontracts must have valid contract compliance certification. Should the offeror use subcontractors, the City shall use the offeror as the primary contact point.

3.3 Product Requirement Specifications: The offeror shall provide Qualys software renewal as follows:

ITEM # SKU # DESCRIPTION QTY

Q-P-VMDR Qualys VMDR Bundle; Vulnerability Management, Detection, and Response, includes the following Qualys Modules:

Cloud Agent VM, includes VM scanning Internal & External.

Qualys PCI is bundled at no additional cost with External IPs only.

* Threat Protection

* Continuous Monitoring

* Patch Detection

* Cloud Agent SCA - includes authenticated scanning

* Standard API - Application Programming Interface

* Virtual Scanner (Unlimited)

* Passive Network Sensor virtual edition (Unlimited)

* Qualys Gateway Service (Unlimited Appliances)

* CertView Internal & External

* Global IT Asset Inventory

* Cloud Inventory

* Container Inventory

* Secure Enterprise Mobility (Inventory)

Q-E-PUB-PC Qualys Policy Audit / Policy Compliance--Public Sector * Automated compliance scanning * Technical control library based on CIS and NIST * Compliance reports to show compliance with policies * Exception management workflow for auditors

Q-E-PUB-PCM Qualys Public Sector Policy Audit / Policy

Compliance - Module Price

3.4 Qualys Contact: The City’s contact for Qualys renewals is:

James Williams Technical Account Manager

(209) 921-3181 EXT 284

jwilliams@qualys.com

Caleb Fox Technical Account Manager cfox@qualys.com

4.0 ORDERING, DELIVERY and INVOICING

4.1 Ordering Procedure: A written purchase order will be established. The Purchase Order will have the delivery information and invoice information.

4.2 Invoicing: Each invoice shall show the City Purchase Order number, a brief description identifying the item, the unit price, and the total amount. The invoice amount must exactly match the purchase order amount in accordance with the bid proposal. All Invoices should be mailed to the following address to ensure proper payment:

DoT/Fiscal PO Box 2949 Columbus, OH 43216

Invoices can also be submitted electronically to:

DoTInvoices@columbus.gov

5.0 EQUAL OPPORTUNITY CLAUSE

5.1 The contractor/vendor/bidder will not unlawfully discriminate against any employee or applicant for employment because of race, sex, sexual orientation, gender identity or expression, color, religion, ancestry, national origin, age, disability, familial status or military status. The contractor will take affirmative action to ensure that applicants are employed, and that employees are treated during employment without regard to their race, sex, sexual orientation, gender identity or expression, color, religion, ancestry, national origin, age, disability, familial status or military status. Such action shall include, but not be limited to, the following: employment up-grading, demotion, or termination;

rates of pay or other forms of compensation; and selection for training. The contractor agrees to post in conspicuous places, available to employees and applicants for employment, notices summarizing the provisions of this Equal Opportunity Clause.

5.2 The contractor will, in all solicitations or advertisements for employees placed by or on behalf of the contractor, state that the contractor is an equal opportunity employer.

5.3 It is the policy of the City of Columbus that business concerns independently owned, operated, and controlled by MBE/WBEs shall have the maximum practicable opportunity to participate in the performance of contracts awarded by the City.

5.4 The contractor shall permit access to any relevant and pertinent reports and documents by the Office of Diversity and Inclusion Director for the sole purpose of verifying compliance with this Title 39 and the Office of Diversity and Inclusion regulations. All such materials provided to the Office of Diversity and Inclusion Director by the contractor shall be considered confidential.

5.5 The contractor will not obstruct or hinder the Office of Diversity and Inclusion Director or his/her deputies, staff and assistants in the fulfillment of the duties and responsibilities imposed by Title 39 of the Columbus City Codes.

5.6 The contractor and each subcontractor will include a summary of this Equal Opportunity Clause in every subcontract. The contractor will take such action with respect to any subcontractor as is necessary as a means of enforcing the provisions of the Equal Opportunity Clause.

https://library.municode.com/oh/columbus/codes/code_of_ordinances?nodeId=TIT39DIINCO

5.7 The contractor agrees to refrain from subcontracting any part of this contract or contract modification thereto to a contractor not holding a valid certification number as provided for in Title 39.

5.8 Failure or refusal of a contractor or subcontractor to comply with the provisions of Title

39 may result in cancellation of this contract.

5.0 EQUAL OPPORTUNITY CLAUSE