Addendum 2 (QAs) 12.11.23 update.pdf

FLORIDA DEPARTMENT OF COMMERCE

ADDENDUM NO. 2

SOLICITATION NUMBER: 24-ITN-001-TD

SOLICITATION TITLE: FL WINS Customer Portal

RESPONSE OPENING DATE: 1/9/2024 @ 3:00 P.M. EST

ADDENDUM NUMBER: 2

ADDENDUM PURPOSE: Department’s Written Answers to Technical Questions

ADDENDUM DATE: 12/11/2023

The Department hereby amends ITN No. 24-ITN-001-TD as noted within this Addendum. For revisions, underlines represent additions and strikethroughs represent deletions. All revisions are highlighted. All other terms and conditions of the solicitation remain in effect. In the event of a conflict between previously posted information and the information contained herein, the information herein shall control. The information included in this Addendum is hereby made part of this solicitation.

FAILURE TO FILE A PROTEST WITHIN THE TIME PRESCRIBED IN SECTION 120.57(3), F.S., OR FAILURE TO POST THE BOND OR OTHER SECURITY REQUIRED BY LAW WITHIN THE TIME ALLOWED FOR FILING A

BOND SHALL CONSTITUTE A WAIVER OF PROCEEDINGS UNDER CHAPTER 120, F.S.

Any protest concerning this agency decision or intended decision must be timely filed with the Agency Clerk. Protests may be filed by courier, hand delivery, or U.S. mail at the Florida Department of Commerce, Purchasing Office, 107 East Madison Street, Room B-47, Caldwell Building, Tallahassee, Florida 32399-4128, within the time prescribed in Section 120.57(3), F.S., and Chapter 28-110, Florida Administrative Code. It is the filing party’s responsibility to meet all filing deadlines. The Procurement Officer should be listed and copied in such filings. Please note: This Addendum does not need to be returned with the reply.

The enclosed information has been provided for consideration in the preparation of your response to the above-mentioned solicitation.

This Addendum includes the Department’s written answers to the written questions received.

This Addendum also includes the following changes:

Change No. 1:

A revision to Tab 4, a. General Solution, 6a.

Change No. 2:

A revision to C.17, Data Privacy and Cyber Security Guidelines

Change No. 3:

ADDENDUM NO.2

12/11/23

A revision to B.14 Solicitation Requirements

Change No. 4:

A revision to Attachment B Cost Reply

Change No. 5:

Preferred Pricing Clause Affidavit

Change No. 6:

State Project Plan

Change No. 7:

A revision to the Additional Resources

Change No. 1:

Tab 4, a. General Solution, 6a., is hereby revised as follows:

• Tab 4 – Proposed Common Customer Portal Solution and Requirements Traceability

Respondent shall provide a narrative that fully describes the proposed Common Customer Portal Solution using a federated data architecture and supporting services and how it meets the requirements of this ITN.

To facilitate evaluating responses, Respondent shall complete and submit Attachment K, Requirements Traceability Matrix, with their response.

Responses will include the following three sub-sections within Tab 4.

a. General Solution

In this section, Respondent shall describe how the proposed Solution meets the requirements established in Section C, Scope of Work, and will enable the state of Florida to achieve these benefits. Respondent shall describe the design and implementation principles of:

1. Information and Business Architecture

2. Interaction Design

3. Content Strategy

4. Visual Design

5. Usability

6. Cyber Security and Privacy

a. Respondent must indicate whether Respondent is FedRAMP certified or not. If Respondent is FedRAMP certified, provide a detailed description of the status for FedRAMP security requirements under Federal Information Processing Standards (FIPS 199) and evidence showing the Respondent's current status. If the Respondent is in the process of becoming FedRAMP certified, Respondent must provide a projected timeline for achieving FedRAMP certification.

7.

a. Respondent must indicate whether or not all cloud services, which are to be utilized as part of the FL WINS Customer Portal, have obtained FedRAMP provisional authority to operate (P-ATO) at the “Moderate” impact level or higher under Federal Information Processing Standard (FIPS) 199. Respondent must also provide evidence indicating the current ATO status for each cloud service. If a cloud service provider is in the process of obtaining FedRAMP ATO, Respondent must provide a projected timeline for authorization, and the service must indicate at lease an “in process” status in the FedRAMP Marketplace.

[The remainder of Tab 4, a. General Solution, 6a. is unchanged]

Change No. 2:

C.17, Data Privacy and Cyber Security Guidelines, is hereby revised as follows:

C.17 Data Privacy and Cyber Security Guidelines

Contractor shall ensure the Solution and services support and comply with the following baseline processes and guidelines:

1. Is hosted in the government cloud or secure private cloud, as approved by Commerce; if Contractor is FedRAMP certified, the Solution and services must be hosted in the government cloud or secure private cloud with at least FedRAMP provisional ATO at the “moderate” or higher level;

1. Is hosted in the Government Cloud or Secure Private cloud as approved by Commerce. If applicable, all cloud services must have FedRAMP provisional authority to operate (P-ATO) at the “Moderate” impact level or higher under Federal Information Processing Standard (FIPS) 199.

2. Utilizes application security best practices and standards, 60GG-2 F.A.C., 60GG-4 F.A.C., Cybersecurity and Infrastructure Security Agency (CISA) Cloud Security Technical Reference Architecture (TRA), CISA Zero Trust Maturity Model, NIST Special Publication 800-53, the Center for Internet Security (CIS) Controls Version 8, the OWASP Top 10, the SANS Institute Securing Web Application Technologies (SWAT) Checklist, and FedRAMP Moderate ATO (if applicable);

3. Has the capability to request and track system changes and upgrades for audit and traceability purposes;

4. Allows accounts to be configured with strong passwords, passphrases, and multi-factor authentication (MFA) measures that meet or exceed FL WINS requirements;

5. Provides audits and alerts for user activity to FL WINS;

6. Uses strong, unique encryption keys, where applicable, in both the application and underlying infrastructure, and allow them to be fully managed and controlled by FL WINS Workforce Partners;

7. DevOps practices must follow NIST DevSecOps guidance;

8. Development processes must follow secure best practices, using the NIST Secure Software

Development Framework (SSDF) as a baseline, and include, at a minimum, a process for continual vulnerability assessment (to include static code analysis, dynamic code analysis, and web application scanning), as well as best practices for code versioning and automated release management in the cloud environment;

9. Service Organization Control (SOC) 2 Type 2 compliance audit reports for any SaaS components of the Solution must be provided and reviewed by FL WINS partners;

10. Meet information compliance requirements, which, as applicable, include including, but are not limited to, IRS Publication 1075, Safeguards for Protecting Federal Tax Information, SSA information security safeguards data sharing agreements, FBI Criminal Justice Information Systems Policy, and Unemployment Insurance Program Internal Security requirements;

11. Florida laws and rules must be followed, including, but not necessarily limited to:

• Section 501.171, F.S., Security of Confidential Personal Information concerning notice and duties of third-party agents and requirements for disposal of customer records http://www.leg.state.fl.us/statutes/index.cfm?mode=View%20Statutes&SubMenu=1&App_ http://www.leg.state.fl.us/statutes/index.cfm?mode=View%20Statutes&SubMenu=1&App_mode=Display_Statute&Search_String=501.171&URL=0500-0599/0501/Sections/0501.171.html mode=Display_Statute&Search_String=501.171&URL=0500- 0599/0501/Sections/0501.171.html;

• NIST 800 Series, NIST Cybersecurity Framework, and CIS Controls (https://www.cisecurity.org/controls/). Contractor is expected to remain in compliance with these policies over the lifetime of this Contract; and

• Section 443.1715, F.S., regarding disclosure and confidentiality of Reemployment Assistance information http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String= &URL=0400-0499/0443/Sections/0443.1715.html.

• 60GG-2 State of Florida Cybersecurity Standards, ensuring all technology components involved in the Solution, vendor default settings posing security risks can be changed, including encryption keys, accounts, passwords, and SNMP (Simple Network Management Protocol) community strings.

60GG-2: STATE OF FLORIDA CYBERSECURITY STANDARDS - Florida Administrative Rules, Law, Code, Register - FAC, FAR, eRulemaking (flrules.org)

12. Ensures compatibility with common industry standard Identity and Access management (IAM) protocols and platforms.

13. Has the ability to transmit, using industry standard protocols, audit, and log information to external platforms (e.g., SIEM and/or central log management tools).

[The remainder of C.17, Data Privacy and Cyber Security Guidelines, is unchanged]

Change No. 3:

Section B.14, 3, Solicitation Requirements, is hereby revised as follows:

3. In accordance with the requirements of Sections B.13, B.37, and B.37.2, it is MANDATORY that the Respondent return the following with their Cost Reply:

- one (1) original, signed, and sealed Attachment B, Cost Reply,

- fifteen (15) paper copies of the signed Cost Reply,

- one (1) electronic copy of the original, signed Cost Reply (on USB drive), and

- one (1) electronic redacted version of the Cost Reply (on USB drive).

The required attachments for the Technical Cost Reply include those referenced below:

1. Attachment B, Cost Reply

[The remainder of Section B.14, 3, Solicitation Requirements, is unchanged] http://www.leg.state.fl.us/statutes/index.cfm?mode=View%20Statutes&SubMenu=1&App_mode=Display_Statute&Search_String=501.171&URL=0500-0599/0501/Sections/0501.171.html http://www.leg.state.fl.us/statutes/index.cfm?mode=View%20Statutes&SubMenu=1&App_mode=Display_Statute&Search_String=501.171&URL=0500-0599/0501/Sections/0501.171.html https://www.cisecurity.org/controls/ http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0400-0499/0443/Sections/0443.1715.html http://www.leg.state.fl.us/statutes/index.cfm?App_mode=Display_Statute&Search_String=&URL=0400-0499/0443/Sections/0443.1715.html https://www.flrules.org/gateway/ChapterHome.asp?Chapter=60gg-2 https://www.flrules.org/gateway/ChapterHome.asp?Chapter=60gg-2

Change No. 4:

Attachment B, Cost Reply, is hereby revised as follows:

ATTACHMENT B

REVISED COST REPLY

The Respondent should propose a fixed price for the duration of the Contract which is inclusive of travel, lodging, per diem expenses, and all other costs associated with the completion of the deliverables associated with all tasks defined in Section C, Scope of Work, of this ITN. Only Section D of this Cost Reply will be utilized for cost scoring according to the formula listed on Attachment I, Evaluation Criteria.

The Respondent shall complete all sections of Attachment B, Cost Reply, using the format provided below, review for accuracy, and sign by an authorized representative. This individual must have the authority to bind Respondent.

A. Any one-time cost to secure usage of product (i.e., Purchase):

No. Product Cost

1. License Fee (example) $

2. TBD $

Product Costs Subtotal $ *Note: TBD entries should provide the Respondent the opportunity to list additional fees that Commerce may not have considered.

B. Services to produce the following Deliverables, as stated in Section C, Scope of Work:

Deliverables Cost

Deliverable Cost Subtotal $ Instructions: Provide cost and any recurring cost for each Contract deliverable.

C. For any additional recurring costs for usage of Respondent’s Solution and services, Respondent must include all costs associated, including but not necessarily limited to, license, software, or support fees that will be charged by the Respondent and any fees expected to be charged by third parties. Respondent must specify whether each fee is Respondent’s fee or a third-party fee and whether each type of fee will be charged one time, annually, or on some other fee schedule.

Fee Type Year 1 Year

Renewal

Year 1 Renewal

Year 2 Renewal

Year 3 Cost

License Fee (if applicable)

Warranty/Post Implementation Support

Fee (see Section C.13.10)

TBD* $ $ $ $ $ $

TBD* $ $ $ $ $ $

TBD* $ $ $ $ $ $

Additional Recurring Costs

Fee Type Year 1

(Mar 2024- Feb 2025)

Year 2 (Mar 2025- Feb 2026)

Year 3 (Mar

2026-Dec 2026)

Renewal Year 1

Renewal Year 2

Renewal Year 3

Cost

License Fee (if applicable) $ $ $ $ $ $ $ Warranty/Post Implementation Support Fee (see Section C.13.10)

TBD* $ $ $ $ $ $ $

TBD* $ $ $ $ $ $ $

TBD* $ $ $ $ $ $ $

Additional Recurring Costs $ $ $ $ $ $ $

*Note: TBD entries provide the Respondent the opportunity to list additional recurring fees that Commerce may not have considered.

D. GRAND TOTAL

Section Category Subtotals A. Product Costs $ B. Deliverables Costs $ C. Additional Recurring Costs $

GRAND TOTAL $

E. Value Added Services – Innovative Ideas As described in B.54, FL WINS is looking for value added ideas that may provide additional benefits to the Solution. Please describe the idea or concept in the table below and any estimated cost. Respondent should note if the cost(s) are one-time or recurring costs.

Innovative Idea/Concept One-time or Recurring

Costs

F. One-Off Projects Please provide the rate for each category or role proposed (programmer, system analyst, database administrator) as discussed in C.24. Staffing may also include both IT Staff Augmentation and/or the DMS Management Consulting Services backdrop (80101500-20-1) and/or NASPO Cloud Solutions (43230000- NASPO-16-ACS). A complete list of Job Family Descriptions can be found on the State of Florida, Department of Management Services; STC #80101507-21-STC-ITSA, for IT Staff Augmentation Services.

The following link is provided for your convenience:

https://www.dms.myflorida.com/business_operations/state_purchasing/state_contracts_and_agreeme nts/state_term_contract/information_technology_staff_augmentation

Respondent Role Title IT Consulting State Contract Job Title Hourly Rate

*Authorized Representative’s Signature

*Typed Name and Title of Authorized Representative

*This individual must have the authority to bind the Respondent.

https://www.dms.myflorida.com/business_operations/state_purchasing/state_contracts_and_agreements/state_term_contract/information_technology_staff_augmentation https://www.dms.myflorida.com/business_operations/state_purchasing/state_contracts_and_agreements/state_term_contract/information_technology_staff_augmentation

Change No. 5:

A preferred copy of a Contractor Affidavit is hereby added as follows:

CONTRACTOR AFFIDAVIT

Regarding the Contract Between

[ ] (the “Contractor”) and

Florida Department of Commerce

Contract No.: [ ] dated [ ] (the “Contract”)

Pursuant to section ______ of the Contract, the undersigned Contractor hereby attests that the Contractor is in compliance with the preferred-pricing clause contained in the Contract.

PRINT CONTRACTOR NAME:

By: Date: ____________

Signature of Authorized Representative

Print Representative’s Name/Title:

STATE OF ____________

COUNTY OF __________

Sworn to (or affirmed) and subscribed before me this _____ day of __________, by ___________________ .

Signature of Notary

(Print, Type, or Stamp Commissioned Name of Notary Public)

[Check One] ____ Personally Known OR ____Produced the following I.D. ___________________

Contractor Name FEIN.:

Contractor’s Authorized Representative Name and Title___________________________________ Address City, State, Zip Phone Number Email Address

Change No. 6:

Section B.40, State Project Plan, is hereby revised as follows:

B.40 State Project Plan (Appendix C)

The Respondent should submit a written plan, as Appendix C, addressing the State’s four (4) objectives listed below, to the extent applicable to the items/services covered by this solicitation. Commerce expects Respondents to address each objective. Objectives not addressed in the selected Respondent’s Reply must be addressed prior to Contract execution. The State reserves the right to negotiate mutually acceptable changes with the Respondent selected for award, prior to execution of the Contract.

1. Environmental Considerations: The State supports and encourages initiatives to protect and preserve our environment. The Respondent shall submit as part of this plan, the Respondent’s plan to support the procurement of products and materials with recycled content. The Respondent shall also provide a plan for reducing and/or handling of any hazardous waste generated by the Respondent which must comply with the provisions of rule 62-730.160, F.A.C., and applicable State and Federal laws. It is a requirement of the Florida Department of Environmental Protection that a generator of hazardous waste materials that exceeds a certain threshold must have a valid and current Hazardous Waste Generator Identification Number. This identification number shall be submitted as part of the Respondent’s explanation of its company’s hazardous waste plan and shall explain in detail its handling and disposal of waste.

2. Certification of Drug Free Workplace Program: The State supports and encourages initiatives to keep the workplace of Florida’s suppliers and contractors drug free. Section 287.087, F.S., provides that, where replies which are equal with respect to price, quality, and service are received, preference shall be given to a Reply received from a Respondent that certifies it has implemented a drug-free workforce program. If the Respondent has a drug-free workplace program, the Respondent shall sign and submit Attachment C, Certification of Drug Free Workplace Program, attached hereto and made a part hereof.

3. Products Available from the Blind or Other Handicapped (RESPECT): The State supports and encourages the gainful employment of citizens with disabilities. Information about RESPECT and the products it offers is available at http://www.respectofflorida.org.

The Respondent shall describe how it will support the use of RESPECT in offering the services/items being procured under this solicitation. Respondents proposing the use of RESPECT as a subcontractor shall be required to provide written proof of a subcontractor agreement for this solicitation with RESPECT with their Reply. The written documentation shall be a one (1) page letter supplied by the subcontractor on its letterhead stationery, clearly identifying Commerce Solicitation Number, the project title, and the prime contractor with whom the firm intends to subcontract.

http://www.respectofflorida.org/

4. Prison Rehabilitative Industries and Diversified Enterprises, Inc. (PRIDE): The State supports and encourages the use of Florida Correctional work programs. Information about PRIDE and the products it offers is available at http://www.pride-enterprises.org.

The Respondent shall describe how it will support the use of PRIDE in offering the services/items being procured under this solicitation. Respondents proposing the use of PRIDE as a subcontractor shall be required to provide written proof of a subcontractor agreement for this solicitation with PRIDE with their Reply. The written documentation shall be a one (1) page letter supplied by the subcontractor on its letterhead stationery, clearly identifying Commerce Solicitation Number, the project title, and the prime Contractor with whom the firm intends to subcontract.

[Remainder of Page Intentionally Left Blank] http://www.pride-enterprises.org/

Change No. 7: Additional Resources, is hereby revised as follows:

ADDITIONAL RESOURCES

The following additional resources are attached by separate document and incorporated by reference within this solicitation:

Exhibit 1: Target Operating Model (TOM)

Exhibit 2: Service Blueprints

Exhibit 3: Program Management Plan (PgMP)- REVISED

Exhibit 4: Program Management Plan Functions, Roles, and Responsibilities

Exhibit 5: Discovery Report

Exhibit 6: Customer Portal Charter- REVISED

Exhibit 7: Program Roadmap

Exhibit 8: Sample Defect Log

The following Exhibits are hereby added as part of this ITN:

Exhibit 9: Technical Specifications.

Exhibit 10: BPR Discovery Report, Iteration 2

[Remainder of Page Intentionally Left Blank]

Invitation to Negotiate

24-ITN-001-TD

FL WINS Customer Portal Technical Questions and Answers

The Department’s responses to timely submitted questions are provided below:

Responden t Question

Number

ITN Page Number, Section Number, Subsection Reference

Question Answers

1 N/A Would the Department consider a 3- week extension to submit the final proposal for this ITN.

Responses to this ITN must be submitted by 2:30 p.m. on January 9, 2024. Please also see Addendum No. 1 for an updated calendar of events.

2 I trust this message finds you well. We have reviewed the Customer Portal ITN with great interest and are excited about the opportunity to submit a comprehensive and competitive proposal for your consideration.

However, we are writing to express a concern regarding the current submission deadline of December 27th, 2023.

Given the upcoming Thanksgiving and Christmas holidays, we foresee potential scheduling challenges that may affect our capacity to finalize a robust submission within the original timeline.

Considering the significance and detail required in preparing a valuable proposal for the ITN, we would like to ensure we dedicate the necessary effort and due diligence that a project of this degree deserves. Unfortunately, with the expected abbreviated work weeks and employee leaves during the holiday period, we are concerned that the quality of our proposal could be adversely affected.

We appreciate your understanding of the unique scheduling circumstances that the holiday season brings about and believe that an extension would allow us to provide the most thorough and high-quality submission possible.

Promoting the spirit of delivering the best for your esteemed organization, we kindly request a time extension on the RFP submission deadline.

Please let us know your views on this matter. Thank you in advance for your understanding and we look forward to your favorable response.

Please see response to question 1.

3 Due to the complexity of the solution, we would like to request that questions due date be extended from November 27th, 2023, to December 12th, 2023 and also I would like to submit my sincere request to extend the final proposal submission date from December 27th 2023 at least by 4 weeks later for us to submit a very competitive proposal which meets all your requirements

Please see response to question 1.

4 Would Commerce consider extending the response due date of 12/27/23 due to the date coinciding with the holidays?

Please see response to question 1.

5 ITN, Page 38, Section C.12 Staffing Requirements

“Key Named Staff (as referenced below in Contractor’s Key Named Staff for the project) are to include, but not be limited to the Project Manager, Senior Business Analyst, Quality Assurance Manager, Configuration Manager, Data Lead, Operations Manager, Test Manager, Chief Solutions Architect, Application Software Architect, and Training Lead”

Please confirm the OCM Lead role is required key personnel. It is not listed in the list above but is listed in C.12.2 Key Named Staff

OCM should be included in the Key Personnel.

6 ITN, Page 8, Section B.14 Solicitation Requirements

Based on the current due date of 12/27/2023, will Commerce please remove the requirement to provide paper copies of bidder’s responses and make response an entire email submission?

Respondents are required to provide paper copies by the specified due date.

7 ITN, Page 8, Section B.14 Solicitation Requirements

Based on the current due date of 12/27/2023, will Commerce please remove the requirement to provide Attachment H Reference Questionnaire as a sealed paper submission and allow references to email their questionnaire directly to Commerce?

Respondents are required to provide Attachment H Reference Questionnaire as a sealed paper submission by the specified due date.

8 Exhibit 6, Page 6, Section Estimated Project Budget

Can Commerce please provide more details around the Estimated Project Budget provided in Exhibit 6? This did say $55M has been allocated to this project/ITN. What specific activities are included in the budget:

Implementation and O&M support, or only implementation for example? This was then updated, and the budget amount has been removed and now says, “On File.” The prior Schedule IV-B had a budget of $186.5M and a June Budget presented had $172M. Understand these numbers could have evolved. Can you please provide the budget by FY what has been allocated specific for this ITN?

The Department is looking for the best value to the state.

9 Attachment K – RTM, Technical Sheet, REQ- P-05

“The portal shall be designed and configured to accommodate at least X concurrent customers and a significant increase in traffic at Y% growth annually, with the ability to scale both vertically and horizontally, where vertically is by scaling the existing resources and horizontally is by adding additional resources”

Can Commerce please provide the values for X and Y% in the above requirement? All Respondents do not have the ability to meet and size to unknown amounts.

Please reference Exhibit 9- Technical Specifications.

10 ITN, Page 42, Section C.13 Deliverables

The deliverables section lists the Project Phases as:

Planning, Monitoring and Controlling, Design, Development, Testing, Training, Deployment, and Closure.

In Exhibit 3, FLWINS-Program-Management-Plan, Exhibit 3-3: FL WINS Project Phases, it lists Project Phases as:

Initiation, Planning, Execution, Closeout and Monitoring & Control.

These don’t match 1:1 – can Commerce please match Phases across documents for traceability and compliance?

Respondents should use the Phases described in Section C.13. The Department will resolve the discrepancies during the kickoff meeting

11 ITN, Page 14, Section B.33 Conflict of Interest

Are vendors who completed the Target Operating Model (TOM) and other assessments associated with FL WINs that have already been completed through other contracts precluded from bidding on this ITN?

The Department will review each reply to determine if a conflict of interest exists.

12 ITN, Page 19, Section B.37.1 Technical Reply Format, and Tab 2 Resumes and Experience

Do Key Staff Resumes count toward the 100-page reply limit?

Key Staff resumes can be excluded from the 100-page limit.

13 ITN, Page 23, Section B.40 State Project Plan

Respondents are instructed to submit a written plan addressing the State’s four listed objectives. In which submission Tab (outlined in section B.37.1. Technical Reply Format) should this written plan be included in?

This should be included in Appendix C. See Addendum No. 2.

14 ITN, Page 23, Section B.40 State Project Plan

Does the written plan in response to the State Project Plan count against the 100-page reply limit?

The State Project Plan can be excluded from the 100-page limit.

15 ITN, Page 32, Section C.6 Assumptions and Constraints

“Project deliverables, deliverable acceptance, and invoicing shall be completed within the timeframes required by Commerce, and all project work must be completed no later than December 31, 2026, to receive payment."

Can Commerce please clarify what is meant by “to receive payment” part of this statement? Commerce is asking for pricing by deliverable and respondent would be paid once a deliverable is accepted. What payment is this statement referring to?

All project deliverables, deliverable acceptance and invoicing shall be completed no later than December 31, 2026.

To receive payment, all phases within the deliverable must be complete.

16 ITN, Page 42, Section C 12.2 Key Staff

Would you consider removing or modifying the requirement for staff to reside in Tallahassee, FL for the duration of the project to ensure the best qualified talent is supporting the project and to reduce overall project costs?

Key Staff should be available in Tallahassee during the initial phases of the project and available to the Department. With the approval of the FL WINS program manager, they can work remotely after the initial phases.

17 ITN, Page 71, Attachment B Cost Reply, Section F

How long does the Rate Card future work pricing need to be valid for?

The life of the contract

18 ITN, General Are offshore (non-US) resources permitted to be used on this contract?

No.

19 Attachment K How would you like Attachment K printed so that it is legible?

This should be printed on 8.5"x11" paper, and also provided electronically on a USB drive.

20 Page 23, Section B.40 State Project Plan

The RFP states "The Respondent should submit a written plan addressing the State’s four (4) objectives" but does not provide information regarding where this plan should reside in the submission. Within which tab should the respondent place the State Project Plan? Please clarify.

This should be included in Appendix C. See Addendum No. 2.

21 Page 17, Tab 2 - Statement of Qualifications, Resumes and Experience

Will resumes be excluded from the page count? Please clarify.

Please see response to question 12.

22 Page 6, B.9 Potential Federal Funding

Can Commerce please provide a copy of the submitted cost allocation plan?

Please see the Schedule IV-B.

23 Page 8, B.14 Solicitation Requirements, Item 3

Please confirm the statement should read "The required attachments for the Cost Reply...." as elsewhere in the document it states to keep Cost Reply and Technical Reply separate.

Yes, cost Information should only be included in the Cost Reply submission in a separate sealed envelope.

24 Page 16, B.37.1 Technical Reply Format, Tab 1

Can Commerce provide the baseline metrics currently used to determine/define customer service expectations?

The Program uses the performance criteria within the MFMP Vendor Performance Tracking. Please visit the MFMP website for more information:

https://www.dms.myflorida.com/business_operations/state_purchasing/m yfloridamarketplace/mfmp_agency_customers/working_with_mfmp_vend ors/vendor_performance_tracking_vpt

25 Page 17, B.37.1 Technical Reply Format, Project Personnel

The ITN states the "respondent must provide a staffing plan for the solution development, implementation OR the introduction of a proven integrator that the Respondent may partner with". Please clarify what is meant by the statement "or the introduction of a proven integrator" as it our understanding that Commerce seeks a single prime Respondent. Therefore, the requested staffing plans should include all resources and all associated costs (services, licenses, etc.) should be included in said Respondent's Cost Reply.

The Department is looking for a prime contractor with proven experience and any cost should be reflected in the Cost Reply.

26 Page 21, B.37.2 Cost Reply Submittal

To provide transparency to Commerce and support a apples-to-apples comparison, would Commerce consider allowing Respondents to submit an attachment of estimating and work-share assumptions along with the Cost Reply submission.

This is a vendor led effort, each Workforce Partner Agency (WPA) has existing modernization efforts happening simultaneously. The expectation is for the vendor to lead the effort and consult with WPA staff for SME efforts, not lean on them for work. Additionally, BPR is working on resource gap analysis in amendment work effort.

27 Page 22, B.39 Reference Questionnaire

We understand the timeframe Commerce is operating under and do not wish to slow it down. Given, however, the request for questionnaires is over the holiday season, would Commerce allow extending the due date to January 5, 2023, for only the Reference Questionnaires

28 Page 29, B.54 Value

Added Services Commerce has asked respondents to describe any value-added services but has not indicated where in the response these should be included. Please clarify and confirm this is excluded from the page count limit.

They should be included in the Cost reply (Attachment B) indicating the value-added services, description of the services and cost.

29 Page 29, B.54 Value Added Services

The ITN seems to conflict on including cost information in the Technical Reply. For Innovation ideas on page 29 it says to include the ideas as an attachment with cost options in with the Technical Reply and not included in the Cost Reply. However, the Cost Reply (Attachment B) has Section E for Value Added Services. Please clarify where

Please see response to question 28.

Commerce would like the narrative description of Innovative Ideas. Please clarify if the associated cost for those features/ideas should ONLY be on the Cost Reply using Section E.

30 Exhibit 3 Program Management Plan, Page 4 - 'Procured vendors on the FL WINS Program are not expected to participate in any other procurement negotiations.'

Request DOC please confirm that vendors that have been awarded prior contracts for services related to WINS including Business Support and Technical Advisory Services, Independent Verification and Validation (IV&V), Business Process Reengineering (BPR) and Transformational Change Management (TCM) and Workforce Integration Management project (WIM) are not eligible for award under this ITN as a Prime Vendor or Subcontractor Entity.

Please see response to question 11.

31 Exhibit 3 Program Management Plan, Page 41 ' The FL WINS Repository is described in more detail in Attachment B

- Artifact Management Standards.'

The ITN Attachment B is labeled 'Cost Reply'. The DOC references Attachment B - Artifact Management Standards. Can this document be made available for review?

Please reference Addendum 2, Change No. 3, Attachment B, Cost Reply.

Attachment B in the Program Management Plan is an internal document used to manage program artifacts. It is not relevant to the ITN.

32 Page 78, Attachment B

- Table C, Recurring Fees for respondent's solution and services

DOC timeline of events envisions finalizing a contract in February 2024 with an initial term completion by December 31, 2026.

Section C of the Cost Reply provides for Year 1 and Year 2 pricing response before requesting extension year pricing. Please clarify how vendors should provide pricing for the implementation term and if another column (Year 3) should be added to the table? Are the years being referenced Fiscal, Calendar or Contract? Please clarify.

Year 1: Contract Execution (tentative) March 1, 2024 - February 28, 2025 Year 2: March 2025 - February 2026 10 months: March 2026 - December 2026

The Years are being referenced as Contract Year

33 Page 78, Attachment B

- Table C, Recurring Fees for respondent's solution and services

What does last column in the table cost mean? Please confirm/clarify this is the total cost for the associated row

Please see Addendum 2, Change No. 3, Cost Reply

34 Page 1, Exhibit 7, Program Roadmap

Program roadmap shows phases as user-experience design, single sign-on and so on

There are 5 phases proposed for technical implementation in Exhibit 1 - FLWINS-Target-Operating-Model and in Traceability Matrix, which are aligned to Master Service Blueprint.

Please clarify the how these phases should be aligned with the phases displayed in exhibit7 - Program Roadmap?

See response to question 10

35 Page 78, Attachment B

- Cost Reply, Section C, Please confirm any hosting costs are to be included in Section C of Attachment B.

Respondents are to propose their potential solution with any potential costs associated with development, implementation, and maintenance and operations based on the problem statement provided. Respondents should provide any hosting costs in the recurring costs table in section C.

36 Page 78, Attachment B

- Cost Reply, Section F, Given several of the skills / resource types that Commerce may need are not always on the IT Staff Augmentation contract, can Section F of Attachment B be expanded to include both the IT Staff Augmentation and/or the DMS Management Consulting Services backdrop (80101500- 20-1) and/or NASPO Cloud Solutions (43230000-NASPO-

16-ACS)?

Yes, the Department is looking for a potential vendor to provide an implementation team and include their costs. The Workforce Partner Agencies are not responsible for staffing the solution vendor team.

37 Page 19, B.37.1

Format, Tab 4 - Proposed Common Customer Portal Solution and Requirements Traceability

Under the "General Solution" section, item 7 has no statement. Please clarify if this section should include a statement.

Please refer to Addendum 2, Change No. 1, Tab 4.

38 Page 19, B.37.1

Format, Tab 4 - Proposed Common Customer Portal Solution and Requirements Traceability

Attachment I provides the evaluation criteria and points to be awarded for respondent's proposals. Please clarify how Commerce will determine the points for traceability responses that demonstrate how a product delivers capability out-of-the-box vs configure or custom build?

Evaluators will assign points based on the responses in each section based on how the proposed system will best meet their requirements for that section including the level of effort required to implement.

39 Commerce Solicitation No. 24‐ITN‐001‐TD

Past Performance / References: The respondent must provide a detailed narrative of prior relevant experience performing similar services as referenced in Section C, Scope of Work. The narrative must include, at a minimum, five (5) separate and verifiable clients, other than Commerce, for which work similar to that specified in this solicitation has been performed for a period of at least five

(5) continuous years - Does the inability to provide references for clients of at least five (5) continuous years for each client relationship preclude the responder from consideration or does five continuous years of work across five separate clients for a minimum of five years satisfy this experience qualification?

Respondents must provide references for clients of at least five (5) continuous years for each client relationship.

40 Commerce Solicitation

Respondents are required to meet FedRAMP security requirements under Federal Information Processing Standards (FIPS 199) and must provide evidence showing the Respondent's current status with regard to FedRAMP certification.

If the Respondent is in the process of becoming FedRAMP certified, they must provide a projected timeline for achieving FedRAMP certification.

This requirement would be relevant to any vendor providing cloud services as part of their solution, ensuring the security standards meet federal guidelines for protecting sensitive government data. If your response involves cloud-based solutions or services, it would be necessary to address this point in detail, demonstrating your current FedRAMP status or outlining the plan and timeline for certification if it is pending. - Can the State of Florida confirm that leveraging a FedRAMP-approved cloud solution satisfies the ITN's security requirements? Is there a need for additional evidence or documentation beyond CSP existing FedRAMP authorization? In providing a complete solution that includes CSP as a FedRAMP-approved platform, will there be any additional FedRAMP-related requirements or documentation required from us as the systems integrator?

Respondent must indicate whether or not all cloud services which are to be utilized as part of FL-WINS, have obtained FedRAMP provisional authority to operate (P-ATO) at the "Moderate" impact level or higher under Federal Information Processing Standard (FIPS) 199. Respondent must also provide evidence indicating each cloud service's current ATO status. If a cloud service provider is in the process of obtaining FedRAMP ATO, Respondent must provide a projected timeline for authorization, and the service must indicate at least an "in process" status in the FedRAMP Marketplace.

41 Commerce Solicitation

Respondents are required to meet FedRAMP security requirements under Federal Information Processing Standards (FIPS 199) and must provide evidence showing the Respondent's current status with regard to FedRAMP certification.

If the Respondent is in the process of becoming FedRAMP certified, they must provide a projected timeline for achieving FedRAMP certification.

This requirement would be relevant to any vendor providing cloud services as part of their solution, ensuring the security standards meet federal guidelines for protecting sensitive government data. If your response involves cloud-based solutions or services, it would be necessary to address this point in detail, demonstrating your current FedRAMP status or outlining the plan and timeline for certification if it is pending. - Does the state require the entire solution provided by a systems integrator to be FedRAMP authorized, or is it sufficient for the primary cloud service component to hold the FedRAMP approval?

Respondent must indicate whether or not all cloud services which are to be utilized as part of FL-WINS, have obtained FedRAMP provisional authority to operate (P-ATO) at the "Moderate" impact level or higher under Federal Information Processing Standard (FIPS) 199. Respondent must also provide evidence indicating each cloud service's current ATO status. If a cloud service provider is in the process of obtaining FedRAMP ATO, Respondent must provide a projected timeline for authorization, and

42 Commerce Solicitation

Respondents are required to meet FedRAMP security requirements under Federal Information Processing Standards (FIPS 199) and must provide evidence showing the Respondent's current status with regard to FedRAMP certification. If the Respondent is in the process of becoming FedRAMP certified, they must provide a projected timeline for achieving FedRAMP certification .This requirement would be relevant to any vendor providing cloud services as part of their solution, ensuring the security standards meet federal guidelines for protecting sensitive government data. If your response involves cloud-based solutions or services, it would be necessary to address this point in detail, demonstrating your current FedRAMP status or outlining the plan and timeline for certification if it is pending.Should our proposal include details on how we will utilize a 3PAO to ensure ongoing compliance with FedRAMP requirements for the integrated services we provide, even if the primary solutions like CSP are already FedRAMP authorized?

Respondent must indicate whether or not all cloud services which are to be utilized as part of FL-WINS, have obtained FedRAMP provisional authority to operate (P-ATO) at the "Moderate" impact level or higher under Federal Information Processing Standard (FIPS) 199. Respondent must also provide evidence indicating each cloud service's current ATO status. If a cloud service provider is in the process of obtaining FedRAMP ATO, Respondent must provide a projected timeline for authorization, and

43 Is there an incumbent on this contract? If so, will the Department provide the incumbent name, current contract number, duration, historical level of effort, and value of the contract?

No.

44 Also, is the incumbent eligible to bid on this project? Please see response to question 43.

45 Has the Department determined a budget for this contract?

If so, can the budget amount be shared?

The Department is looking for the best value to the state.

46 Can the deadline be extended by two weeks? The extended deadline would enable us to provide a more robust proposal while ensuring all project requirements are met.

47 C.13.8 Deployment Phase

Do you have any preferences for hosting infrastructure, such as on-premises servers or cloud platforms?

See section C.7 Objectives on page 33 of the ITN.

48 Project Management Plan

Are there any critical milestones or deadlines that we should be aware of?

The project will end on December 31, 2026.

49 Project Management Plan

How flexible is the project timeline, and are there any constraints we should consider?

The project will end on December 31, 2026.

50 C.12 Staffing Requirement

Can part of the project be performed outside US, such as from India?

Please see response to question 18.

51 Attachment K Traceability Matrix, Technical tab

There are several hidden rows with “MUST HAVE” requirements. Should vendors be reviewing the hidden rows and responding to them?

Yes

52 ITN p. 5, 8, 22, B.8 Calendar of Events, Replies Due, B.14 Solicitation Requirements & B.39 Attachment H

Will Commerce consider extending the time for references to complete and mail Attachment H?

53 ITN p. 3, 8, 22, B.4, Purchasing Office, B.14 Solicitation Requirements & B.39 Attachment H

Will Commerce allow customers to mail Attachment H directly to the procurement officer?

No

54 ITN p. 8, 22, B.14, Solicitation Requirements & B.39 Attachment H

Will Commerce allow customers to email electronic versions of Attachment H directly to the procurement officer?

Please see response to question 53.

55 ITN p.30, C.1 Purpose, C.2 Background/Overview

Per 287.057 Procurement of Commodities or Contractual Services, will vendors (prime or subcontractors) who were involved in the creation, drafting, or were part of the contract of the 2021 Feasibility Study (DEO Contract Number: C3092 Feasibility Study) be permitted to work on the implementation of this ITN as a prime or subcontractor in any capacity?

Please see response to question 11.

56 ITN p. 30, C.2 Background/Overview

What are the agency database platforms and versions (e.g., Oracle 23.2.0) will the solution need to access and federate?

Please see response to question 9.

57 Exhibit 3 Page 9, Section 2.5, Exhibit 2-1 FL WINS Summary Timeline

Can you please provide clarification as to expected project timelines for the Common Customer Portal including expected go live dates?

The timeline in Section 2.5 of Exhibit 3 is expected to be a high-level overview of the Program timeline. The Department is expecting the respondent to propose a more detailed timeline and project schedule to meet requirements.

58 General Question We respectfully request a 30-day extension to ensure the proper amount of time and attention for the preparation of a thorough response.

Please see response to answer 1.

59 General Question Does the cover page and table of contents count against the 100-page limit?

Yes

60 7 of 100, 8.11 Would the state consider electronic copies? With the holidays, access to print shops may be limited.

Paper copies are required.

61 15 of 100, B.37.1, Cover Sheet – Commerce Solicitation Acknowledgement Form

Is this attachment considered a part of the 100-page limit? Please see the response to question 59.

62 16 of 100, B.37.1, Tab 2 – Statement of Qualifications, Project Personnel / 16 of 100, B.37.1, Tab 2 – Statement of Qualifications, Resumes and Experience

Due to the size of the requested team, can these two items be submitted as an Appendix?

Please see response to question 12.

63 Page 23 of 100, B.40, State Project Plan

Should our response to B.40 be included as an Appendix? This should be included in Appendix C. See Addendum No. 2.

64 Page 29 of 100, B.54, Value Added Services

– Innovative Ideas

Should our response to B.54 be included as an Appendix? Value-Added Services should be included in the Respondent’s Cost Reply

65 Pg 33, C7, Objectives Are the API connections for various systems expected to be one way or bidirectional?

Please see Attachment K- Requirements Traceability Matrix.

Bi-directional is a "must-have" requirement for document sharing.

However, both types of connections still need to be determined by a solution vendor when validating system requirements.

66 Pg 68, C17, Data Privacy and Cyber Security Guidelines

What is the current user authentication system (Azure AD, LDAP, etc.)?

Please see response to question 9 and the updated section C.17 in the

ITN.

67 Pg 33, C6, Constraints What, if any, are the restrictions for using near-shore resources?

Please see response to question 18.

68 Pg 31, C4, Problem Statement

What is the current system in place to manage the processes?

The ITN is intended for vendors to propose their solution based on the problem statement provided.

69 Pg 31, C4, Problem Statement

Does the organization use any Atlassian products? Please see response to question 9.

70 Pg 31, C4, Problem Statement

Do you envision migration from the current tools for work items and Knowledge Base articles?

The ITN is intended for vendors to propose their solution based on the problem statement provided.

71 Pg 31, C5, Statement of Need

How many users total? Please see response to question 9.

72 Pg 34, C7, Objectives For the service desk, how many agents will be responding to tickets?

The ITN is intended for vendors to propose their solution based on the problem statement provided.

73 Pg 33, C7, Objectives How many users will need editing permissions for articles in the knowledge base?

This is undetermined. Please see response to question 9.

74 General How much does the system need to incorporate or follow WIOA and PIRL guidelines (for purposes of data integration, commonality and partner agency reporting requirements).

Unknown at this time.

75 General/ ITN How many users will there be of the system? Can you break them down by user type as follows:

● Partner Agency Case Managers

● Administrative Staff

● Job Seeker Customer Users Employer Users - If employers need to access the system?

Did not see in ITN/ reqs

76 ITN Pg 16 States, “Previous experience completing at least two (2) full lifecycle implementations for comparable solutions, that included successful go live(s) to production;” Can we include similar projects that are currently in development with other states, but have not gone live as of yet?

77 ITN pg 31, C.5 Is the intention of the TOM to have service delivery done within partner agencies and on their “systems of record” but to have those service activities “replicated” to the FL WINS system in order to have a 360-customer record, or will some service activities be recorded directly into the FL WINS system, or are both scenarios possible?

78 ITN Pg. 33 .b B. Advanced Search - Will customers use the system for any “job search” activities, as career exploration is mentioned in the ITN.

The ITN is…