Addendum 3 - 2-3-25.pdf

CHIPPEWA VALLEY SCHOOLS

“Inspiring and empowering learners to achieve a lifetime of success.”

19120 Cass Avenue Clinton Township, MI 48038

Phone: (586) 723-2150, Fax: (586) 723-2128

ADDENDUM 3

February 3, 2025

District Cybersecurity Assessment

RFP 9.2425

This addendum is to clarify additional questions received regarding RFP 9.2425 District Cybersecurity Assessment and to provide answers, all which shall be considered part of the official bid documents.

Questions and Answers

Assessment Duration:

1. Could you please confirm if the specified duration of four (4) months (March 4, 2025 through

June 30, 2025) applies to both internal and external network assessments as outlined in Sections A and B of the State of Work (SOW)?

a. We would like the complete project to be completed within that timeline. The RFP requires only an internal assessment, but Bidders can choose to offer an external assessment as a voluntary add. If an external assessment is accepted by the District, it would be expected to be completed within that same timeframe.

Alternatively, is this timeline solely intended for the internal network assessment?

a. The timeline applies to both internal and external assessments – see above for more detail.

Concurrent Assessments:

2. In the event that the District opts for external network assessment as per Section B, should we assume that the external assessment will run concurrently with the internal assessment within the same four (4) month period?

a. Yes

Sequence of Assessments:

3. If funding permits, would you require a specific sequence for conducting the internal and external assessments, or can they be performed simultaneously?

a. They can be performed simultaneously.

Cost Proposal Clarifications:

4. Could you provide more clarity on how the cost proposal should differentiate between internal and external assessments in the bid submission?

a. The RFP documents have separate sections allowing you to line item the different assessments.

Should we include separate pricing structures for each assessment, as well as voluntary alternates for additional services?

a. Yes, internal and external assessments should have separate pricing included in the bid.

Any voluntary alternates offered should include line item pricing so District can consider their options.

Budget Constraints:

5. Are there any budget constraints or limits on the total cost for the internal and external assessments that we should consider in preparing our pricing proposal?

a. The grant award is $27,000 for this project. The District may consider additional funds from operational but would prefer to stay within the grant budget.

Technology and Framework Information:

6. Can you provide any information on the technologies, tools, or frameworks currently used by Chippewa Valley Schools for their cybersecurity infrastructure?

• The District prefers to use CIS Controls in relation to our network

• Windows 10 devices (a few Windows 11)

• A small number of iPads for select students

• Windows servers

• Active Directory

• InTune and CCM for device management

If this information cannot be shared due to security concerns, could you confirm if any specific tools or frameworks are preferred for compatibility with the District’s systems?

a. CIS Controls are preferred.

Licenses and Taxes:

7. The RFP mentions that licenses and taxes shall be the responsibility of the contractor at no additional cost to the District. Could you confirm if there are any specific tax exemptions or licensing requirements, we should be aware of?

a. The District is a tax-exempt organization (Non-profit, K-12 Education). No specific licenses are required for this project.

All other information shall remain the same. Bidder shall acknowledge receipt of this Addendum by indicating the Addendum Number and date on the Bid Proposal Form in the section titled “Addenda” on page 14.

Lillian Grayson

Lillian Grayson Purchasing & Risk Management Coordinator