Attachment H - Response Template~1.docx

DOCX document 191 KB Posted

Attached to
central communications system
Solicitation number
25-565IGB-FISAD-B-45047
Issued by
Illinois

About this file

This document is an attachment to a Request for Proposal (RFP) issued by the Illinois Gaming Board (IGB) for the procurement of a Central Communication System (CCS). The RFP outlines requirements for the CCS, including connection, monitoring, communication, and activation/deactivation of Video Gaming Terminals (VGTs) and associated gaming equipment statewide. The CCS must support up to 120,000 VGTs and 16,000 licensed establishments. The RFP provides detailed requirements for the CCS's functionality, technical capabilities, service levels, and security controls. Offerors must submit their proposals using the provided response template, which includes sections for executive summary, mandatory requirements, qualifications and experience, proposed staffing, pricing, and responses to desirable functional, technical, and service requirements.

The RFP also includes requirements for NIST and FISMA compliance, diversity commitments, redlines to the terms and conditions, a requirements traceability matrix, and a DoIT scanning agreement. Pricing will be evaluated separately, and the contract term is not specified. Offerors must demonstrate their readiness to commence work immediately upon contract signature and their ability to meet all RFP requirements, particularly in terms of deliverables and timelines.

View the file

Other files

File Type Posted
ipg-active-registered-vendor-disclosure-(formerly-forms-b)-v.23.1.docx DOCX document
vendor-disclosure-(formerly-forms-a)-v.24.1.docx DOCX document
B43061 Q&A RFP Parts 1 & 2.docx DOCX document
Attachment A - State Standard Security Requirements~1.docx DOCX document
Attachment D - Requirement Traceability Matrix.xlsx XLSX spreadsheet
Attachment G - Glossary~1.docx DOCX document
Request for Proposal - Offer to the State of Illinois 10.2.24 v.25.1 (2).pdf PDF
standard-terms-and-conditions (1).pdf PDF
IGB CCS RFP Response QA - RFP B45047 #1 UPDATE 11.8.24.docx DOCX document
Attachment C - Terms & Conditions~1.docx DOCX document
Attachment I - Proposed Key Staff~1.docx DOCX document
Attachment J - Reporting~1.docx DOCX document
complete-vendor-guidance-packet-v.24.2.pdf PDF
standard-illinois-certifications-v.23.1 (1).docx DOCX document
B45047 QA #2.docx DOCX document
IGB Pre-Submission Conference 10-29 B-45047.pptx PPTX presentation
Pre Submission Conference CCS RFP-20241030 1800-1.mp4 MP4 file
IGB CCS RFP~2.docx DOCX document
pre-submission-conference-sign-in-sheet-v-20-1 (4) (002).pdf PDF
Attachment B - Commitment to Diversity~1.pdf PDF
Attachment E - Price Workbook~1.xlsx XLSX spreadsheet
Attachment F - Desirable Scoring Details~1.xlsx XLSX spreadsheet
Attachment K - Scanning Agreement~1.docx DOCX document
commitment-to-diversity-vendor-answer-form-v.24.3.pdf PDF
IGB CCS RFP Response QA - RFP B45047 #1.docx DOCX document
Pre-Submission Attendees.txt TXT text file
Show all 26

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Attachment H – Response Template

STATE OF ILLINOIS

Illinois Gaming Board

ATTACHMENT H — RESPONSE TEMPLATE

Central Communications System Procurement BidBuy Reference Number B45047

All changes in this document are highlighted in yellow in comparison to Attachment H from Bid # B43061.

This document is an attachment to the Request for Proposal (RFP) for the Illinois Gaming Board (IGB), for the procurement of a Central Communication System (CCS). This Attachment provides the Response Template which all Offerors must use for submitting their proposals to the Illinois Gaming Board and is to be submitted to BidBuy as instructed in the main RFP document, section C.1.

A. Offers must be organized as indicated in this Response Template, including the various Appendices that are distinct files.

B. Refer to the main RFP document, Section C.1. for an overview of the Offer organization, packets, and requirements.

C. Offerors are responsible for reading ALL components of this RFP package, and ensuring their Offers adhere to all submission instructions and requirements. Any questions should be submitted as described in the main RFP document, sections C.5., Information Contact, and C.6., Offeror Questions and Agency Response.

D. Create the response document as a separate file titled Attachment H: IGB CCS RFP B45047 Response_Offeror Name and submit as an attachment on the Offeror quote on BidBuy.

E. If applicable, highlight all changes/updates made in your proposal response documents in comparison to your proposal to Bid B43061.

F. Please note that the Offer, excluding resumes, and appendices, should not exceed five hundred (500) one-sided, single spaced pages using Calibri eleven (11)-point font and half inch margins. Primary section page limits are provided below.

MANDATORY: Do not disclose any pricing information except in the Attachment E — Price Workbook, as instructed in the main RFP document.

1.Executive Summary5
2.Mandatory Requirements5
2.1.Mandatory Requirements without Evidence5
2.2.Mandatory Requirements with Evidence13
3.Qualifications and Experience20
3.1.Offeror Background20
3.2.Relevant Offeror Experience20
3.3.References22
4.Proposed Staffing22
4.1.Approach to Staffing22
4.2.Key Staff Roles23
5.Pricing23
6.Response to Desirable Functional Requirements23
6.1.Systems24
6.2.Components24
6.3.Functionality24
6.4.Administration24
7.Response to Desirable Technical Requirements24
7.1.Hardware25
7.2.Infrastructure25
7.3.Software25
8.Response to Desirable Service Requirements25
8.1.Cutover/Deployment/Hyper-care27
8.2.Cyber Security27
8.3.Data Management27
8.4.Development Services27
8.5.Knowledge Transfer and Exit Transition27
8.6.M&O27
8.7.OCM27
8.8.Product Management27
8.9.Quality Assurance28
9.Response to Service Level Requirements28
9.1.Availability28
9.2.Performance — Average Response Time28
9.3.Performance — Maximum Response Time29
9.4.Critical and High Severity Incident Resolution Timeframe29
9.5.Critical and High Severity UAT Defect Resolution Timeframe29
9.6.Security Incidents Response Time29
9.7.Disaster Recovery Restoration Timelines29
9.8.Delivery of Enhancements29
9.9.Incident Severity29
9.10.Incident Resolution Time29
10.Authority to Operate/Authority to Connect Packet29
10.1.STATE OF ILLINOIS NIST and FISMA Compliance Document29
10.2.NIST and FISMA Compliance Requirements30
11.Attachment B — Commitment to Diversity Worksheet33
12.Attachment C — Terms and Conditions Redlines33
13.Attachment D — Requirements Traceability Matrix (TM)33
14.Attachment K — DoIT Scanning Agreement34

1. Executive Summary This section should not exceed twenty (20) pages in length.

Instructions

Provide an Executive Summary of the proposed services, no longer than twenty (20) pages in length, and highlighting the contents of the Offer to the Statement of Work. Emphasize the most key features offered by the proposed approach and methodology, and include a concise overview summarizing the Offeror’s proposed technical approach, the staffing structure, and planned tasks, including:

A. A high-level Corporate overview of the Offeror’s Organization B. A brief overview of the Offeror’s understanding of the goals and expectations of this RFP, high-level approach along with the reasons why the Offeror’s RFP response might represent the best value to the State.

C. High-level work plan depicting major milestones of the full solution implementation.

D. The name, address, phone number, and email address of the person that IGB should contact in case of any questions regarding the response submission.

Offeror Narrative Response: Click here to enter text.

2. Mandatory Requirements

2.1. Mandatory Requirements without Evidence

Instructions

As stated in section F.1 of the main RFP document, the mandatory requirements for this RFP are detailed in the table below, the Offeror must agree to all requirements listed, without providing evidence. By checking the box in the table below, the Offeror acknowledges that all the requirements shall be met with, in the Offeror’s proposal and solution.

MANDATORY REQUIREMENTS WITHOUT EVIDENCE

F.1.1
Prior to the end of the transition period Offeror shall be able to provide all services and staff, maintain a facility and otherwise meet the requirements listed herein.
☐ Agree
F.1.2
Vendor shall perform all services to the sole satisfaction of the State.
☐ Agree
F.1.3
The State makes no guarantee as to a minimum or maximum number of services required, as detailed in this RFP.
☐ Agree
F.1.4
Offeror shall provide two copies of the CCS to be used for ongoing testing by an independent test laboratory or laboratories to test for CCS compatibility and security.
☐ Agree
F.1.5
The Offeror shall include a Reporting & Dashboard Solution with the following minimal functionality:

1) Web-based portal presenting a dashboard of pre-configured and fully populated canned reports, including but not limited to accounting and operational, terminal operator billing and auditing reports.

a. Reports shall include but need not be limited to ‘Reports’ listed in Attachment J.

b. Data fields shall include but not be limited to ‘Data Fields’ in Attachment J.

c. Reports calculations shall include but not be limited to ‘Report Summations and Calculations’ in Attachment J.

d. Data retention for reports, report data and report calculations should be from inception of video gaming to date at all times.

e. A data warehouse, which shall have the capability and capacity to be refreshed hourly.

f. Response times shall be dynamically responsive and reliable at ALL times with no noticeable degradation.

The Reporting solution shall meet all the requirements listed in Section B Minimum Data and Reporting Requirements of the Attachment J - Reporting

2) Ad Hoc Reporting & Dashboard Solution with an appropriate front-end application interface for accessing production data housed in a centralized vendor data warehouse. See Section F Data and Reporting Ad Hoc Reports of the Attachment J – Reporting.

a. Data fields shall include but not be limited to ‘Data Fields’ in Attachment J.

b. Data retention for ad hoc reporting data shall be from inception of video gaming to date at all times.

c. The data warehouse shall have the capability and capacity to be refreshed hourly.

d. Response times shall be reasonable and reliable at all times with no noticeable degradation.

☐ Agree

F.1.6
All mission-critical CCS functions shall be supported by a comprehensive business continuity plan and configuration. The primary site shall consist of at least two (2) logically and geographically separate systems. This solution shall provide real-time communication, processing, and storage redundancy. A component failure in one primary site system must not cause a failure in the other system(s). Offeror shall explain its recovery time objective (RTO) and recovery point objective (RPO) in the event of a failure of one or both the systems. Offeror shall be in compliance with Illinois Department of Innovation and Technology (“DoIT”) requirements and protocols documented in Attachment A Sections A-F. Offeror shall be solely responsible for the quality of the system and all software releases. Although Agency approval is required for the implementation of software it does not change the Offeror’s responsibility for the continued quality and effectiveness of the software.
☐ Agree
F.1.7
Offeror’s CCS shall at all times be in compliance with the Video Gaming Act and Agency rules, regulations, standards, and policies. In the event a non-compliance is discovered, Offeror shall take immediate action to bring the CCS into compliance. Offeror shall provide any changes or enhancements to the CCS as requested by the Agency, State, or Legislative Body. All requests for system support, management and changes are a requirement and shall be completed timely.
☐ Agree
F.1.8
Offeror is responsible for any compliance audits and associated fines, if applicable, for the solution.
☐ Agree
F.1.9
If requested by the Agency, Vendor shall perform on-site field inspections at its sole cost and expense and provide a report in an automated format as approved by the Agency.
☐ Agree
F.1.10
Vendor shall be available to travel and provide the services at any location within the State of Illinois and at any location associated with the CCS.
☐ Agree
F.1.11
Where applicable and upon request, Offeror shall submit proof that equipment associated with the CCS or Offeror’s facility has been inspected for safety and approved by an independent testing laboratory, and that all equipments are in compliance with the regulations applicable.
☐ Agree
F.1.12
Offeror shall commit that all proposed processing computers, networking equipment and diagnostic equipment are new and unused unless explicitly allowed otherwise by the Agency. Equipment proposed shall be compliant with current electronic technology manufacturing standards and be manufactured by the Offeror or its suppliers. All replacement equipment shall represent the then-current equivalent or better standard in case a proposed device is phased out or replaced.
☐ Agree
F.1.13
Offeror shall provide a twenty-four (24) hours per day, seven (7) days per week (including state and federal holidays), 365 days per year support to ensure regulatory compliance with the Act, the Board’s rules, and this contract. The 24-hour, 7-day a-week requirement can be met through any combination of telephone, email, or live chat support. Offeror shall develop a support process for handling CCS related problems and provide the process to the Agency for review and approval. Offeror has a continuing duty to annually evaluate any advances in technology that would aid in the furtherance of communication between IGB licensees and Offeror.
☐ Agree
F.1.14
Offeror shall allow Agency employees to inspect each facility where CCS services for the Agency are conducted, with or without prior notice, to ensure the integrity of work is maintained and for review of new technology being considered for approval. Offeror shall be responsible, annually, for all travel costs incurred by up to two (2) agency employees, including out-of-state airfare, in-state mileage, out-of-state car rental and associated costs including car rental insurance and lodging to inspect each facility.
☐ Agree
F.1.15
At Offeror’s sole cost, prior to system roll-out, the CCS will be tested and certified for compliance with the functional specifications required by the Request For Proposal. Also at the Offeror’s sole cost, the CCS will be tested and certified, at a minimum, on an ongoing annual basis. The testing and certification must be performed by an independent test laboratory certified to provide testing services associated with video gaming.

Offeror shall supply or provide 24/7 access and support to a test system including all hardware and software to the Agency and a licensed independent testing laboratory for the duration of the contract. This test system will be used to test system upgrades and conduct interoperability testing on VGTs, and redemption devices designed to communicate with the central communications system. The test system shall run the identical software that exists on the production system. It may utilize similar but not identical hardware. Please discuss any differences in the response. It is understood that there may be some functionality that the test system may not be able to support that shall be tested on the production system. Please discuss any functionality that can only be tested on the production CCS in your response.

☐ Agree

F.1.16
Offeror shall provide the Agency with real-time remote access to Offeror’s database(s), reports, and documents generated by the CCS and its supporting technologies, infrastructure. Pursuant to the information/data created by requirements stated in the RFP and subsequent contract, and available via a secure communication channel. Offeror shall maintain a quality assurance mechanism to ensure uniform data and data entry processes. The database shall be updated no less than hourly and be able to produce any reports for the IGB in a timely manner upon request.
☐ Agree
F.1.17
Offeror’s online database shall allow the Agency to view updated reports and dashboards of all equipment, software, all items associated with the solution, IGB Self-Exclusion Program (SEP) lists, all items associated video gaming equipment, progressive jackpot meters, including third-party redemption devices, or connected to the CCS. Such updated reports shall be current, and in an automated format approved by the Agency. The database shall meet all minimum requirements stated within the RFP and subsequent contract and shall be able to be modified as needed by the IGB.
☐ Agree
F.1.18
The CCS shall be capable of importing a text file containing Terminal Operator and video gaming location license information including name, license number, and expiration date. The CCS shall also be capable of associating a Terminal Operator or video gaming location license with one or more terminals owned by that Terminal Operator. Furthermore, the CCS shall have the capability to immediately disable individual VGTs, Video Games, redemption devices, or all VGTs associated with a license number and automatically disable terminals based upon the expiration of a license and provide a manual solution for the State to turn on, turn off, enable, disable at the Agencies discretion. Additionally, if a VGT is disabled, the IGB shall be able run a report that will identify the current number of active and disabled VGTs across the State and all data related VGTs including audit records.

☐ Agree

F.1.19
Licensed Terminal Operators shall be allowed real-time access to Offeror’s data, including but not limited to active/inactive status of Video Gaming Terminals and meter data via secure communication channel. Offeror shall maintain a quality assurance mechanism to ensure data security and data entry processes. Terminal Operators can submit requests for their data to be displayed through the secure internet portal and if those requests are approved by the IGB then Offeror can publish the data on the secure internet portal. If Offeror intends to charge licensed Terminal Operators a fee for access to Offeror’s database, provide a detailed explanation in Attachment H. All data available to the any party including Terminal Operators shall be documented and approved by the State. Access to all data from any party shall be logged, stored, and auditable at all times.
☐ Agree
F.1.20
Licensed Terminal Operators shall be allowed secure, encrypted, read-only access to the solution to obtain any required financial information for their VGTs or other information authorized by the Agency including game level data. If Offeror intends to charge licensed Terminal Operators a fee for access to the central communications system, provide a detailed explanation in Attachment H.
☐ Agree
F.1.21
Offeror shall immediately notify the Agency of any situation or incident involving the integrity of the CCS or any VGTs or associated gaming equipment connected to the solution.
☐ Agree
F.1.22
Offeror shall employ a staff of full-time skilled professionals to afford a separation of responsibilities that provides independent work product verification and fulfills the requirements stated herein to the satisfaction of the Agency, Acts, Laws, this RFP and subsequent contracts. Offeror shall provide all services using competent and properly trained personnel in accordance with the highest standards of the gaming industry. Offeror shall employ sufficient numbers of qualified and trained personnel to implement and operate the CCS and as needed, travel throughout the State of Illinois and to any location associated with the CCS in order to meet the needs of the Agency regarding the implementation and regulation of video gaming, and services or functions of the subsequent contract.
☐ Agree
F.1.23
Offeror shall only utilize personnel in the performance of the services rendered in the United States who are authorized to work in the United States in accordance with applicable federal and state laws and regulations.
☐ Agree
F.1.24
All CCS hardware and system software shall be replaceable at any time by more modern models or versions simply by means of system upgrades. All CCS hardware and system software shall be fully supported by the respective manufacturer or supplier at all times during the contract. In the event where support for any hardware module, component, or system software is discontinued by the manufacturer or supplier, Offeror shall replace, if required by the Agency, the respective hardware modules, components, or system software modules at its own cost prior to the support being discontinued. Offeror shall without delay inform the Agency of any such support discontinuation that it may become aware of.
☐ Agree
F.1.25
The CCS solution shall provide the ability to deny access upon a failed attempt to access and resource. CCS security features to ensure this shall align with State Security Standards. Levels of security and password shall be continuously documented, managed, and audited and available to the Agency at all times including management of user roles and assignment. Access to every aspect of the system shall be restricted to only authorized personnel.
☐ Agree
F.1.26
Each level of infrastructure, operating system, software shall have multiple security controls and distinct access levels. Sign on and Access shall be in accordance with State Security Requirements protocols documented in Attachment A Sections A, B,C,E, and F and future security updates by the State.
☐ Agree
F.1.27
There shall be no capability to connect into any gaming system from a remote, non-gaming terminal without Agency approval. Any dial-in capability, such as for remote diagnosis of equipment or software, shall employ stringent security mechanisms such as modems with dial-back, modems with on/off key locks, message encryption, and logging of sessions. Connections to other remote systems and terminals shall be protected by firewalls, encryption, or other means. The acceptability of any such security approach will be subject to Agency approval.
☐ Agree
F.1.28
The Offeror shall provide a continuously updated list of all users of the CCS solution that includes privilege and access levels and to what part of the CCS solution.
☐ Agree
F.1.29
The CCS shall include approved procedures for Intrusion Protection, Intrusion Detection, Virus Protection, and Virus Detection, in accordance with State Security Requirements documented in Attachment A Sections A-F and future security updates by the State.
☐ Agree
F.1.30
Offeror shall ensure all CCS technologies are dedicated and not shared such as shared cloud services. The Agency shall approve all programs, data files and operating system files may reside on the CCS technologies. If hosted in a public cloud it shall be in a FedRAMP compliant environment.
☐ Agree
F.1.31
All non-routine access alerts and alarm events shall be logged in a SIEM and archived for future retrieval. These alerts and events shall have the capability to be sent by the Offeror to the relevant Terminal Operator in real time. Events shall be displayed and available for printout for Agency or Offeror intervention, auditing purposes, and in accordance with State Security Requirements documented in Attachment A Sections A-F and future security updates by the State.
☐ Agree
F.1.32
Software signatures shall be collected on all devices at all locations and be validated by "higher level" devices on the CCS network. ‘Devices’ includes Gaming Equipment, site controllers, third party redemption devices and/or cashier stations but excludes off-the-shelf, "non-gaming" devices such as "dumb" terminals.
☐ Agree
F.1.33
The CCS shall support the necessary protocol levels to perform validation of “receipt tickets” and communicate with third-party redemption devices.
☐ Agree
F.1.34
The CCS audit trail functions shall be capable of tracking system changes in a “before and after” format (i.e., what was the system setting before the change? what was the system setting after the change?). All audit trail entries shall be time and date stamped.
☐ Agree
F.1.35
The gaming software shall be maintained under an approved software change control system.
☐ Agree
F.1.36
Performance of the CCS shall not degrade noticeably during ordinary functionality. This includes all daily, weekly, monthly, and yearly operations and report generation.
☐ Agree
F.1.37
Offeror shall continually identify advanced technology options that may further improve the reliability and/or performance of the CCS beyond the baseline design. Examples include, but are not limited to retailer last mile connections, backbone communications, and/or gaming network to IGB communications. Offeror is encouraged to utilize a range of technologies that may advance the IGB network infrastructure while continuing to provide reliable, cost-effective service to retailers. Any proposed advanced technology will address key factors such as security, availability of the service, reliability, maintainability, openness and standardization, performance, and cost.
☐ Agree
F.1.38
The implementation process requires that all of the new software, hardware, and service elements of the new CCS be delivered, installed, tested, and put into production before operation of the new CCS. In addition, a significant amount of pre-existing information and processes shall be integrated into the new CCS. Existing CCS data and information shall be house in the new CCS. The new CCS shall be able to transition from the old CCS within 24 months of completion of the bid without a loss or interruption in video gaming statewide.
☐ Agree
F.1.39
Upon expiration of a contract, Offeror at its sole expense, shall assist in the full transition of historical video gaming data, other information and all necessary processes and procedures as determined necessary by the IGB to the successor Offeror in a timely manner to ensure there is no loss of video gaming revenue and no risk to the integrity of gaming in the state of Illinois.
☐ Agree
F.1.40
Scheduled VGT location changes shall be communicated and tracked to the IGB video licensing system and video gaming location change process.
☐ Agree
F.1.41
Ad Hoc Consulting:

As part of Offeror’s commitment to update and support the central communication systems to align with statutory, regulatory or Agency changes and advancements in gaming technology, Offeror shall consult for the Agency on an as needed basis. Such consulting services may include, but not necessarily be limited to, the following:

1) Providing consultation and advice to the Agency and assist the Agency in drafting rules, technical standards, and procedures regarding video gaming.

2) Provide expert testimony on behalf of the Agency as requested.

☐ Agree

F.1.42
The primary CCS shall be hosted at a location in the United States and approved by the Agency and always be in compliance and accordance with State Security Requirements in Attachment A Section A, B, C, E, F and future security updates by the State. To ensure redundancy all secondary location(s) shall be geographically diverse to ensure operations down time is at or near zero.
☐ Agree
F.1.43
Offeror shall adhere to and comply with all security requirements listed under Section A, Standard Security Requirements, in Attachment A State Standard Security Requirements.
☐ Agree
F.1.44
Offeror shall adhere to and comply with all the requirements listed under Section B, Minimum Logging Requirements, in Attachment A State Standard Security Requirements
☐ Agree
F.1.45
Offeror shall adhere to and comply with all security control requirements listed under Section C, Security Controls for Vendors, in Attachment A State Standard Security Requirements
☐ Agree
F.1.46
Offeror shall adhere to and comply with all the requirements listed under Section F - Vulnerability Assessment, in Attachment A State Standard Security Requirements
☐ Agree

2.2. Mandatory Requirements with Evidence

This section should not exceed hundred (100) pages in length, excluding the requirements table below.

Instructions

As stated, the main RFP document, the below outlines mandatory requirements to which the Offeror shall provide evidence of meeting. Using the table provided below, please check the box acknowledging these requirements are met with your proposal and provide traceability to the specific section and page number of this document where evidence has been provided.

Provide evidence for each of the requirements listed in this section by referencing the requirement number after the below table as indicated.

MANDATORY REQUIREMENTS WITH EVIDENCE
Proposal Response Section & Page Number
F.2.0.
Offeror shall, at its sole cost, design, develop, implement, operate and maintain the CCS in accordance with the VGA, the Board’s Rules, Technical Standards, and the provisions and requirements in this RFP and subsequent contract. Offeror shall provide the agency with a CCS which will connect, monitor, communicate with and be able to turn on, turn off, and activate, deactivate VGTs, video games within, and associated video gaming equipment used in the video gaming industry. This system shall be capable of supporting no fewer than 120,000 VGTs and no fewer than 16,000 licensed establishments. A CCS shall include, at a minimum:

1) Primary and Secondary site(s) to house the CCS;

2) 24 hour, seven days a week, 365 days per year, online real time communication with all VGTs;

3) Perform a technology review at least every twelve (12) months during the term of the contract in order to ensure that the CCS is not antiquated or outdated.

4) Update and support the central communication systems to align with statutory, regulatory, or Agency changes and advancements in gaming technology;

5) Data center operations;

6) Field services support;

7) Call center support to assist and resolve issue, and how it will be accessible to Board licensees;

8) Training and support, and how it will be accessible to Board licensees;

9) Agency training and documentation shall be in accordance with standards, criteria and subject matter specified by this RFP and subsequent contract and the Agency and shall include but not be limited to the following;

a. System functionality;
b. Audit capabilities;
c. Backup and disaster recovery procedures;
d. Security features;

e. Complete CCS user access;

f. Reporting;
☐ Met
F.2.1.
Offeror shall have a minimum of five years continuous active participation in an applicable industry, providing equipment/services comparable in size and complexity to those specified in this RFP and subsequent contract. Please provide evidence that includes, but not be limited to, a list of similar size and type projects the Offeror has completed.
☐ Met
F.2.2.
The Offeror shall identify and describe each location at which it intends to provide CCS services or any necessary consulting services in their proposal. Each location shall be secure to the satisfaction of the Agency and shall be accessible to the Agency at all times. Secure building, camera security system, redundant energy systems, fire protection system, and other physical security requirements approved by the IGB and always in compliance with the State Security Requirements documented in Attachment A.
☐ Met
F.2.3.
A timeline for implementing services shall be submitted with the bid as stated in F.1.38 of the RFP.
☐ Met
F.2.4.
A detailed explanation of the methodology and plan for implementing all requested services shall be submitted with the bid.
☐ Met
F.2.5.
The CCS shall be designed in such a way that the daily tasks of system operators including VGT data entry, enrolling, configuring, moving and deactivating VGTs is simple, efficient, and requires a minimal number of steps. The ability to select multiple terminals for each operation and the ability to intuitively copy information should be used. The Offeror shall describe in detail the steps involved in each of these operations and any other typical operations in its response and how the State will be able to leverage these tasks in its daily work.

☐ Met

F.2.6.
Proposed escalation policy and organization change management process shall be submitted with the bid.
☐ Met
F.2.7.
Offeror shall describe its testing procedures for software changes and implementation to ensure continuous quality.
☐ Met
F.2.8.
The Proposal shall identify software engineering support services for the CCS, error correction procedures, changes required due to amendments to the Video Gaming Act or the Agency’s rules and requirements, how game changes will be communicated to VGTs and how the CCS will activate and deactivate VGTs on demand or by program.
☐ Met
F.2.9.
Offeror shall provide factual evidence explaining clearly how the system is flexible, scalable, and be tailored to the needs and requirements of the Agency. Flexibility and adaptability are critical as the gaming environment will evolve over the course of the contract.
☐ Met
F.2.10.
Offeror’s proposal shall respond on how they will address the following:

1) System Releases Offeror shall support releases of software batches at no less frequency than quarterly. Offeror shall describe the process, timeline, and approach for installation of the quarterly batches including notification of changes to the Agency. Offeror shall also support emergency software releases and describe the process and approach for installation of emergency software releases including notification of changes to the Agency.

2) Software Support Offeror shall provide engineering support for CCS changes including application enhancements, operating system upgrades, vulnerability patches, and updates and upgrades. Offeror shall describe the process for monitoring application enhancements, operating system upgrades, vulnerability patches and updates and upgrades as well as Offeror’s methodology for determining whether to install or not install an enhancement, upgrade or update.

3) Shared Records for Change Management In fulfillment of joint responsibilities of Offeror and the Agency to request and make changes in a timely and correct manner, Offeror shall provide the Agency access to change request and tracking system.

4) Project Request Database Offeror shall provide a project request database management system, dedicated to the Agency, to be used by the Agency for making any type of requests including but not limited to new protocols, revoked media, system enhancements, problem resolution, research, ad hoc reports or any new management, audit or investigative reports. Offeror shall employ at least 1 employee whose sole job responsibility is to generate and respond to any and all inquiries from the IGB. This includes information, reports, queries, maintenance of the video gaming self-exclusion program list, and any other information the agency needs to meet it regulatory responsibilities. This employee shall possess no less than 2 years of project management experience. The system should also be used by Offeror’s development and/or management team to update and keep current the status on all the requests. For any rejected requests, the explanations and notes for the rejections should be provided directly by Offeror’s dedicated employee and be recorded in the system. For any open active requests, implementation estimations and status should be updated daily or ad hoc reports as requested in the system The IGB shall have access to the project request database to monitor projects in real time.

5) Security in Development Offeror shall describe the security policies and practices that will be used to protect the CCS against the introduction of intentional or unintentional malicious code. The policies and practices shall conform to the requirement in compliance with the State Security Requirements documented in Attachment A.

6) Protocol Offeror shall utilize a Game to System (“G2S”) protocol that has the functionality to enable the Agency and Offeror to activate or deactivate individual gaming devices (VGTs) from the CCS. This would include a capability for the IGB to disable VGTs through its own internal video gaming management system.

7) Protocol conversions Offeror shall agree to and describe its ability to seamlessly convert from the use of a G2S protocol to the use of another standard industry protocol, as defined by the Gaming Standards Association, within six (6) months of written direction to convert by the Agency.

8) Signature verification The CCS shall be able to communicate with and verify the signature of programs located in each VGT. The CCS shall have the functionality to autonomously disable Video Gaming Terminal software if it does not pass the signature verification process. The CCS shall prevent the software from becoming enabled until it has successfully passed the signature verification process. Furthermore, the event shall trigger an alert on the application used by designated Agency staff and shall be logged in the database. The CCS shall be capable of generating reports by date and location of these events.

9) Damages For Untimely Compliance Offeror shall include as part of its proposal/business model a formula for the reduction of payment(s) to Offeror or for Liquidated Damages for its failure to comply with agreed upon timelines, system failure, failure to assign qualified or adequate resources, failure to interface with Video Gaming Terminals, or failure to switch from the primary CCS to the secondary CCS as required in this Request For Proposal or by contract, without compromising any other service provided above and beyond any SLA, SLRs, and Pricing in this RFP.

☐ Met

F.2.11.
The CCS shall have the functionality to turn on, turn off, enable, and disable VGT software by manufacturer, operator, software version, location, or software image and to prevent previously disabled software from becoming enabled. This functionality shall also possess the ability to disable VGTs by municipality, county, or any other designation determined by the IGB.
☐ Met
F.2.12.
The solutions shall allow Illinois staff the ability to/ enable / disable/ turn on-off the machines and specific games directly on the machines (VGPs).
☐ Met
F.2.13.
The CCS shall have the functionality to disable a game or games on one or more VGTs by game name or identifier or prevent the game from becoming enabled. The CCS shall be able to perform this task on a statewide, manufacturer, program or site basis.

☐ Met

F.2.14.
Offeror shall describe its ability to support Amber alert messages or other broadcast notices to be displayed on VGTs.
☐ Met
F.2.15.
The CCS shall be capable of generating all daily, weekly, monthly, and yearly reports and invoices as well as ad hoc reports as requested by the Agency and as specified in the Attachment J – Reporting.

☐ Met

F.2.16.
The CCS shall be capable of monitoring the operation of each VGT and it shall, at a minimum, be capable of creating reports and maintaining reports for the duration of this contract, the following information for each VGT and for each game where applicable:

a. The number of cents wagered;

b. The number of cents won;

c. The number of cents paid out by a printed ticket;

d. The number of cents accepted via bill;

e. The number of cents transferred to the VGT electronically, if applicable;

f. The number of cents transferred from the gaming machine electronically, if applicable;

g. The number of cents paid out via jackpot, if applicable;

h. The number of cumulative credits representing money inserted by a player;

i. The number of cents on the credit meter;

j. The number of games played;

k. The number of games won;

l. The number of times the logic area was accessed;

m. The number of times the cash door was accessed;

n. The number of games played per game theme;

o. The amount wagered per play, per game theme.

p. Reports related to Receipt Tickets, including, at a minimum:

i. Receipt Ticket Issuance Report;

ii. Receipt Ticket Redemption Report;

iii. Receipt Ticket Liability Report;

iv. Transaction Detail Report. This report shall be available from the CCS and show all receipt tickets issued by a particular video gaming terminal and all receipt tickets redeemed at a particular payout terminal;

v. Receipt Ticket Rejection Report;

vi. Expired Voucher Detail Report;

vii. Undue economic concentration reporting;

viii. Progressive jackpot reporting;

ix. Other reports as needed.

q. See Attachment J - Reporting for other reporting requirements and sample reports ☐ Met

F.2.17.
Offeror shall be able to track and report on any or all meters in the G2S V3 protocol document or other industry standard protocol as approved by the State.
☐ Met
F.2.18.
Offeror shall support tracking of promotions or bonusing by a party system. At a minimum, the system shall support all of the meters used to track the particular transaction. It is highly desirable that the CCS monitor and audit the promotion itself on the system and ensure compliance with the maximum award. Please describe the ability to communicate with another system and the ability to audit a promotion. Ability to monitor and report suspicious activity to the IGB.
☐ Met
F.2.19.
The CCS shall be capable of monitoring and tracking any and all G2S events defined in the G2S V3 protocol. The CCS shall be capable of polling the VGTs for the event, assigning an accurate timestamp to the event and transmitting and storing it in the host database. The CCS shall be capable of generating event reports, by event(s), by terminal(s), by location(s), by operator(s), by time and date range or any combination thereof. These reports should be updated daily and available at the request of the IGB.
☐ Met
F.2.20.
VGTs: The CCS shall be capable of supporting at least 120,000 Video Gaming Terminals without any noticeable loss in performance.
☐ Met
F.2.21.
Sites: The CCS shall be capable of supporting at least 16,000 sites without any noticeable loss in performance.
☐ Met
F.2.22.
Cashless payment systems: The Offeror shall have the ability to assist with the implementation and continued monitoring of cashless payment systems.
☐ Met
F.2.23.
Ticket in Ticket Out (“TITO”): The CCS shall allow for TITO technology on a per video gaming establishment basis, including all reporting, monitoring, accounting, and tracking as required in this solicitation.
☐ Met
F.2.24.
Self-Exclusion Program: The CCS shall be able to accept and process participants of the IGB voluntary self-exclusion list on a weekly basis. The CCS shall possess the functionality to disable a VGT if an IGB voluntary self-excluded person attempts to play on a terminal after the person has scanned his or her State issued driver’s license or State ID card into a VGT. The CCS shall also possess the ability to cross reference the SEP list before any payout can be initiated with third party redemption terminals. If you are incapable of meeting any requirement at the time of offer, provide a description of the necessary steps to meet that requirement and a timetable for when that requirement will be met.
☐ Met
F.2.25.
Progressive Jackpots: Offeror shall support tracking, reporting, accounting, and monitoring of progressive jackpots and meters including those meters manufactured by a third-party. At a minimum, the system shall support all of the G2S meters used to track the particular progressive jackpot transaction. The CCS shall monitor and audit the progressive jackpot itself on a third-party system and ensure compliance with the maximum award. Please describe the ability to communicate with another third-party system and the ability to audit a progressive jackpot. The CCS shall have the ability to support tracking, reporting, accounting and monitoring of linked area progressives, standalone progressives, and wide area progressives. The CCS shall be able to remotely disable standalone and linked area progressive jackpots for any reason.
☐ Met
F.2.26.
Vendor shall comply with all compliance requirements specified in section A Data and Reporting Compliance and Governance of Attachment J - Reporting
☐ Met
F.2.27.
Vendor shall ensure that all reporting requirements listed under Sections C, D and E in the Attachment J – Reporting will be addressed as part of the reporting solution proposed.
☐ Met
F.2.28.
Vendor shall provide key resource details for the mandatory roles as identified in section 4.1 of this response document
☐ Met
F.2.29.
Vendor shall provide evidence of meeting NIST and FISMA Compliance Requirements as detailed in section 10.2 of this response document.
☐ Met

Response to Mandatory Requirements with Evidence - Provide a description of the Offeror’s solution to each of the requirements listed in Table 2.2. Reference the requirement number with each response.

3. Qualifications and Experience This section should not exceed forty (40) pages in length.

3.1. Offeror Background

Instructions

Provide details regarding the Offeror’s background, size, and corporate resources. Details should demonstrate that the Offeror is an established company engaged in the business of developing and/or providing similar services. Offeror should provide a brief company history, including the founding date and the number of years it has been in business as currently constituted.

In this narrative Offerors shall declare if, within the last thirty six (36) months from the date of the publication of this RFP, they have: (i) received a subpoena, investigatory demand, or request for information from any regulatory, civil or criminal law enforcement agency or authority; (ii) been the subject of any investigation, inquiry, or proceeding by any regulatory, civil or criminal law enforcement agency or authority; or (iii) been subject of any procurement disciplinary or debarment process or proceeding. Where possible, provide additional information to explain the background and status of any affirmative answers.

3.2. Relevant Offeror Experience

Instructions

Use the template provided below in Table 1: Offeror Experience Template (copying and pasting to duplicate as necessary) to list experience relevant to the solution and services identified for this RFP. The State requires a minimum of two (2) relevant experiences for each Offeror.

Include all relevant experience and provide contact information for every example provided. The period for reporting experience is 2019 to the present. The State reserves the right to contact any Offeror clients for information regarding the Offeror’s performance.

Offerors may also provide the following information in the “Narrative” sections of Table 1 specific to the experience listed in the table:

A. Describe how experience on projects of similar size, scope, and technical components is relevant to the services in this RFP.

B. Describe the processes and procedures the Offeror has implemented to ensure security and protect individual privacy.

C. Describe any issues or failures the Offeror encountered in that work, how these were resolved, and lessons learned.

D. The Offeror should stipulate their readiness to commence work immediately following contract signature. This includes providing a clear affirmation of their ability to meet all RFP requirements, particularly in terms of deliverables and timelines, using available corporate resources and fulfilling current contractual obligations.

E. Describe Offeror’s experience working with similar contracts, including any experience working with applicable licensing management systems.

Table 1: Offeror Experience Template Project Name: Click here to enter text.

Client Name and Address:

Click here to enter text.

Exact Primary Scope of Offeror’s Contract with this Client:

Click here to enter text.

Offeror’s Role (prime, sub, other):

Click here to enter text.

Years Engaged:

Click here to enter text.

Actual or Estimated Annual Contract Value:

Click here to enter text.

Type of System/Services Included in the Contract Scope:

☐ License Management System ☐ Solution Hosting Experience ☐ Other Systems or Services (please describe) Programs Included in the Contract Scope:

☐ Licensing, Permitting and Regulations ☐ State government programs ☐ Other Programs (please describe)

Contact Name and Title:

Click here to enter text.

Contact Phone and Email:

Click here to enter text.

Narrative item A: Describe how experience on projects of similar size, scope, and technical components is relevant to the services in this RFP.

Click here to enter text.

Narrative item B: Describe the processes and procedures the Offeror has implemented to ensure security and protect individual privacy.

Click here to enter text.

Narrative item C: Describe any issues or failures the Offeror encountered in that work, how these were resolved, and lessons learned.

Click here to enter text.

Narrative item D: Highlight specific details regarding current contractual obligations and corporate resources. The Offeror should be able to substantiate to the satisfaction of the State that the Offeror has enough resources to successfully meet all RFO requirements, including deliverables and timeline requirements.

Click here to enter text.

Narrative item E: Describe Offeror’s experience working with similar contracts, including any experience working with applicable election management systems.

Click here to enter text.

4. Proposed Staffing This section should not exceed forty (40) pages in length.

Offerors approach to staffing should include the necessary resources to fulfill all activities necessary as outlined in the Traceability Matrix. IGB expects to provide a dedicated Project Manager, limited SME time as necessary, and the staff to receive the Train the Trainer services.

4.1. Approach to Staffing

Instructions

Describe the Offeror’s approach to staffing the project to meet all the requirements described in this RFP. The State has identified key staff roles below and Attachment I - Proposed Key Staff.

Please note, the Offeror shall commit the following three (3) Key Staff Roles for the duration of the project (i.e., IGB reserves the right to review and approve the replacements for the three (3) listed roles):

A. Project Manager B. Functional Lead C. Technical Lead Offerors should carefully consider the requirements of this RFP and the goals stated when developing their recommended additional key staff roles and their staffing approach.

Throughout the term of the contract term, the Offeror should employ enough staff to provide all services.

For all roles, key and any additional roles recommended by the Offeror, provide the following information:

A. Staff allocation during the contract term, based on a 40-hour work week (e.g., 100%, 50%).

B. Definitions of each role and the associated responsibilities for each role.

4.2. Key Staff Roles

Instructions

Key Staff Roles are defined in Attachment I - Proposed Key Staff Offeror should identify any additional staff roles necessary to meet the scope and requirements of this RFP.

A. Copy/Paste the Staff Resume Tables provided in Attachment I - Proposed Key Staff for each of the proposed Key Staff into this section provided below.

B. Populate all requested information and ensure supporting evidence is provided to cover mandatories as defined in Section 2.2 of this document and the Template provided under section ‘Staff Resume Table’ in the Attachment I - Proposed Key Staff to provide the key staff details. The staff information should include details on the resource qualification, project description, relevant experience, and reference contact details for the resources.

Offeror Narrative Response and Key Staff Resumes: Click here to enter text.

5. Pricing Instructions

Pricing will be evaluated only on the information provided in BidBuy. Please follow the instructions provided in the BidBuy Instructions of the RFP. Ensure to submit the Pricing proposal as a separate attachment.

6. Response to Desirable Functional Requirements This section should not exceed hundred (100) pages in length.

Instructions

Please review tab 4. Desirable Functional Requirements of Attachment D — Requirement Traceability Matrix, in its entirety to answer subsections 6.1-6.9 below. Each of the subsections below (6.1-6.9) represent a Level 0 Capability as listed in column B of the TM. Offerors should provide a narrative response for each Level 0 Capability and Level 1 Capability subsections. Responses should include descriptions for each Level 1 Capability as well, as listed in column C of the TM. Offerors should detail how their approach will meet the needs for each capability within the project, what challenges should be considered, and how these challenges are proposed to be overcome. Level 0 Capabilities are listed by subsection number below with the expected Level 1 Capabilities that Offerors should include in each of their responses.

· 6.1 System — Describe approach to meeting all System requirements including the following Level 1 Capability subcategories (as listed in column C): Video Gaming Central Communication System (CCS), Network, Reporting, Data Repository, and Logging.

· 6.2 Components — Describe approach to meeting all Component requirements including the following Level 1 Capability subcategories (as listed in column C): Licensed Video Gaming Terminals Management and Redemption…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .